Nodejs 应用程序部署在 CentOS 7 中，Apache 无法被域访问

Question

I'm trying to deploy my app in CentOS 7 with Apache but even though the app is running, it is not accessible neither by the domain.

When I try to visit with the domain, it says Forbidden You don't have permission to access this resource .

Please note that I can access the website with ip:port.

This is the configuration for Apache in sites-available directory with file name example.com.conf :

<VirtualHost *:80>
        ServerName  example.com
        ProxyRequests On
        ProxyPass / http://server-ip:3000
        ProxyPassReverse / http://server-ip:3000
</VirtualHost>

I also added IncludeOptional sites-enabled/*.conf inside httpd.conf file.

I'm not used to CentOS 7 and neither with Apache so I don't know what I'm doing wrong here. Also note that the domain is configured with CloudFlare and I think the domain has SSL installed as I can see in the browser, it doesn't say 'Not Secure'. It is also worth mentioning that the server host is Private Cloud Server with DirectAdmin.

Answer 1

If think you need to change from ip-address to localhost

Here is a full example of apache virtualhost with SSL:

<VirtualHost xxx.example.com:80>
        RewriteEngine on
        RewriteCond %{SERVER_PORT} ^80$
        RewriteRule ^.*$ https://%{SERVER_NAME}%{REQUEST_URI} [R=301,L]
</VirtualHost>

<VirtualHost *:443>
        Header always set Strict-Transport-Security "max-age=31536000"

        ServerName xxx.example.com

        SetOutputFilter DEFLATE
        SetEnvIfNoCase Request_URI "\.(?:gif|jpe?g|png)$"no-gzip
        AddOutputFilterByType DEFLATE text/html text/plain text/xml text/css text/javascript application/javascript

        ExpiresActive On
        ProxyRequests off
        RequestHeader add original-protocol-ssl 1
        <Proxy *>
                Order deny,allow
                Allow from all
        </Proxy>
        <Location />
                ProxyPass http://localhost:3511/
                ProxyPassReverse http://localhost:3511/
                ProxyPreserveHost On
        </Location>
        SSLCertificateFile /etc/letsencrypt/live/xxx.example.com/cert.pem
        SSLCertificateKeyFile /etc/letsencrypt/live/xxx.example.com/privkey.pem
        Include /etc/letsencrypt/options-ssl-apache.conf
        SSLCertificateChainFile /etc/letsencrypt/live/xxx.example.com/chain.pem
</VirtualHost>

You can naturally remove all ssl configuration.

Also, don't leave ProxyRequest to On because open proxy may be dangerous if not secured: https://httpd.apache.org/docs/2.4/fr/mod/mod_proxy.html#proxyrequests