This is an old revision of the document!
... hostname="..." ...
... ifconfig_em0="inet X.X.X.X netmask X.X.X.X" #you should replace "em0" with the correct interface name ...
X.X.X.X seabsd.change.me # set to the values you set in /etc/rc.conf
pkg install seafile-server seahub
/usr/local/www/haiwen/seafile-server-latest/setup-seafile.sh
/usr/local/www/haiwen/seafile-server-latest/reset-admin.sh E-mail address: changeme@change.me Password: Password (again): Superuser created successfully.
pkg install py27-certbot
certbot certonly --standalone -d <FQDN> --agree-tos -m <EMAIL>
pkg install apache24
LoadModule proxy_module libexec/apache24/mod_proxy.so LoadModule proxy_http_module libexec/apache24/mod_proxy_http.so LoadModule proxy_http2_module libexec/apache24/mod_proxy_http2.so LoadModule rewrite_module libexec/apache24/mod_rewrite.so ServerName <FQDN> LoadModule ssl_module libexec/apache24/mod_ssl.so LoadModule socache_shmcb_module libexec/apache24/mod_socache_shmcb.so Listen 443 SSLCipherSuite HIGH:MEDIUM:!MD5:!RC4:!3DES SSLProxyCipherSuite HIGH:MEDIUM:!MD5:!RC4:!3DES SSLHonorCipherOrder on SSLProtocol all -SSLv3 SSLProxyProtocol all -SSLv3 SSLPassPhraseDialog builtin SSLSessionCache "shmcb:/var/run/ssl_scache(512000)" SSLSessionCacheTimeout 300 <VirtualHost _default_:443> DocumentRoot "/usr/local/www" Alias /media /usr/local/www/haiwen/seafile-server-latest/seahub/media RewriteEngine On <Location /media> Require all granted </Location> ProxyPass /seafhttp http://127.0.0.1:8082 ProxyPassReverse /seafhttp http://127.0.0.1:8082 RewriteRule ^/seafhttp - [QSA,L] SetEnvIf Authorization "(.*)" HTTP_AUTHORIZATION=$1 ProxyPreserveHost On ProxyPass / http://127.0.0.1:8000/ ProxyPassReverse / http://127.0.0.1:8000/ SSLEngine on SSLCertificateFile "/usr/local/etc/letsencrypt/live/<FQDN>/fullchain.pem" SSLCertificateKeyFile "/usr/local/etc/letsencrypt/live/<FQDN>/privkey.pem" <FilesMatch "\.(cgi|shtml|phtml|php)$"> SSLOptions +StdEnvVars </FilesMatch> BrowserMatch "MSIE [2-5]" \ nokeepalive ssl-unclean-shutdown \ downgrade-1.0 force-response-1.0 </VirtualHost>
... SERVICE_URL = https://<FQDN> ...
... FILE_SERVER_ROOT = 'https://<FQDN>/seafhttp' ...