Using Sentora to forward HTTP/S traffic to another server

[RobbGG]

After some more searching and playing I've finally managed to get it working. I'll leave an explanation here in case anyone else needs it.

Firstly my server needed libapache2-mod-proxy-html to be overhauled. Then I needed to generate SSL certs for both my pritunl server (automatically done and built into the system) and for mt Sentora server (using certbot). I was then able to set up SSL forwarding using the following entry into my virtual hosts file. This was done through Admin -> module config -> Apache -> Override virtual host setting which also requires moving the last </VirtualHost> from the end of this snippet to the start (so it fits in with the Sentora automation).

Code:

<VirtualHost *:80>
    ServerName pritunl.my.domain

    ProxyRequests Off
    <Proxy *>
        Order deny,allow
        Allow from all
    </Proxy>

    ProxyPass / http://172.16.1.24:80/
    ProxyPassReverse / http://172.16.1.24:80/
    <Location />
        Order allow,deny
        Allow from all
    </Location>
</VirtualHost>

<VirtualHost *:443>
    ServerName pritunl.my.domain
    SSLEngine On
    SSLProtocol ALL -SSLv2 -SSLv3
    SSLHonorCipherOrder On
    SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS
    SSLCertificateFile /etc/letsencrypt/live/pritunl.my.domain/cert.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/pritunl.my.domain/privkey.pem
    SSLCertificateChainFile /etc/letsencrypt/live/pritunl.my.domain/chain.pem
    
# Keeping bellow for future upgrades.
# Requires Apache >= 2.4
    SSLCompression off
    
    SSLProxyEngine On
    ProxyRequests Off
    ProxyPreserveHost On
    ProxyHTMLInterp On
    ProxyHTMLExtended On
    ProxyHTMLURLMap (.*)172.16.1.24(.*) https://pritunl.my.domain$2 [Rin]
    ProxyPass / https://172.16.1.24/
    ProxyPassReverse / https://172.16.1.24/
</VirtualHost>

// Robb