1Alias /SOGo.woa/WebServerResources/ \
2      /usr/local/GNUstep/Local/LibrarySOGo/WebServerResources/
3Alias /SOGo/WebServerResources/ \
4      /usr/local/GNUstep/Local/LibrarySOGo/WebServerResources/
5
6<Directory /usr/local/GNUstep/Local/LibrarySOGo/>
7    AllowOverride None
8
9    <IfVersion < 2.4>
10        Order deny,allow
11        Allow from all
12    </IfVersion>
13    <IfVersion >= 2.4>
14        Require all granted
15    </IfVersion>
16
17    # Explicitly allow caching of static content to avoid browser specific behavior.
18    # A resource's URL MUST change in order to have the client load the new version.
19    <IfModule expires_module>
20      ExpiresActive On
21      ExpiresDefault "access plus 1 year"
22    </IfModule>
23</Directory>
24
25# Don't send the Referer header for cross-origin requests
26Header always set Referrer-Policy "same-origin"
27
28## Uncomment the following to enable proxy-side authentication, you will then
29## need to set the "SOGoTrustProxyAuthentication" SOGo user default to YES and
30## adjust the "x-webobjects-remote-user" proxy header in the "Proxy" section
31## below.
32#
33## For full proxy-side authentication:
34#<Location /SOGo>
35#  AuthType XXX
36#  Require valid-user
37#  SetEnv proxy-nokeepalive 1
38#  Allow from all
39#</Location>
40#
41## For proxy-side authentication only for CardDAV and GroupDAV from external
42## clients:
43#<Location /SOGo/dav>
44#  AuthType XXX
45#  Require valid-user
46#  SetEnv proxy-nokeepalive 1
47#  Allow from all
48#</Location>
49
50ProxyRequests Off
51SetEnv proxy-nokeepalive 1
52ProxyPreserveHost On
53
54# When using CAS, you should uncomment this and install cas-proxy-validate.py
55# in /usr/lib/cgi-bin to reduce server overloading
56#
57# ProxyPass /SOGo/casProxy http://localhost/cgi-bin/cas-proxy-validate.py
58# <Proxy http://localhost/app/cas-proxy-validate.py>
59#   Order deny,allow
60#   Allow from your-cas-host-addr
61# </Proxy>
62
63# Redirect / to /SOGo
64#RedirectMatch ^/$ https://mail.yourdomain.com/SOGo
65
66# Enable to use Microsoft ActiveSync support
67# Note that you MUST have many sogod workers to use ActiveSync.
68# See the SOGo Installation and Configuration guide for more details.
69#
70#ProxyPass /Microsoft-Server-ActiveSync \
71# http://127.0.0.1:20000/SOGo/Microsoft-Server-ActiveSync \
72# retry=60 connectiontimeout=5 timeout=360
73
74ProxyPass /SOGo http://127.0.0.1:20000/SOGo retry=0 nocanon
75
76<Proxy http://127.0.0.1:20000/SOGo>
77## Adjust the following to your configuration
78## and make sure to enable the headers module
79<IfModule headers_module>
80  RequestHeader set "x-webobjects-server-port" "443"
81  SetEnvIf Host (.*) HTTP_HOST=$1
82  RequestHeader set "x-webobjects-server-name" "%{HTTP_HOST}e" env=HTTP_HOST
83  RequestHeader set "x-webobjects-server-url" "https://%{HTTP_HOST}e" env=HTTP_HOST
84
85## When using proxy-side autentication, you need to uncomment and
86## adjust the following line:
87  RequestHeader unset "x-webobjects-remote-user"
88#  RequestHeader set "x-webobjects-remote-user" "%{REMOTE_USER}e" env=REMOTE_USER
89
90  RequestHeader set "x-webobjects-server-protocol" "HTTP/1.0"
91</IfModule>
92
93  AddDefaultCharset UTF-8
94
95  Order allow,deny
96  Allow from all
97</Proxy>
98
99# For Apple autoconfiguration
100<IfModule rewrite_module>
101  RewriteEngine On
102  RewriteRule ^/.well-known/caldav/?$ /SOGo/dav [R=301]
103  RewriteRule ^/.well-known/carddav/?$ /SOGo/dav [R=301]
104</IfModule>
105