# Set up Discourse on a server with existing Apache sites **URL:** https://meta.discourse.org/t/set-up-discourse-on-a-server-with-existing-apache-sites/30013 **Category:** Sysadmins **Tags:** how-to **Created:** [15 juni 2015 om 00:37 UTC](https://meta.discourse.org/t/set-up-discourse-on-a-server-with-existing-apache-sites/30013 "2015-06-15T00:37:51Z") **Posts on this page:** 1 **Showing post:** 18
### Author: ![AstonJ](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/astonj/32/215041_2.png) [@AstonJ](https://meta.discourse.org/u/AstonJ) #### Post date: [5 januari 2020 om 20:22 UTC](https://meta.discourse.org/t/set-up-discourse-on-a-server-with-existing-apache-sites/30013/18 "2020-01-05T20:22:27Z")
For https, have a look at my most recent config file: ```plaintext global # # upload to: /etc/haproxy/ # # to have these messages end up in /var/log/haproxy.log you will # need to: # # 1) configure syslog to accept network log events. This is done # by adding the '-r' option to the SYSLOGD_OPTIONS in # /etc/sysconfig/syslog # # 2) configure local2 events to go to the /var/log/haproxy.log # file. A line like the following can be added to # /etc/sysconfig/syslog # # local2.* /var/log/haproxy.log # # log 127.0.0.1 local2 tune.ssl.default-dh-param 2048 ssl-default-bind-options no-sslv3 no-tls-tickets ssl-default-bind-ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA ssl-default-server-options no-sslv3 no-tls-tickets ssl-default-server-ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA # chroot /var/lib/haproxy pidfile /var/run/haproxy.pid maxconn 4000 user haproxy group haproxy daemon # turn on stats unix socket stats socket /var/lib/haproxy/stats tune.ssl.default-dh-param 2048 defaults mode http log global option httplog option dontlognull option http-server-close # option forwardfor except 127.0.0.0/8 option forwardfor option redispatch retries 3 timeout http-request 10s timeout queue 1m timeout connect 10s timeout client 1m timeout server 1m timeout http-keep-alive 10s timeout check 10s maxconn 3000 frontend http-in bind *:80 bind :::80 bind *:443 ssl crt /etc/haproxy/certs/ no-sslv3 no-tlsv10 bind :::443 ssl crt /etc/haproxy/certs/ no-sslv3 no-tlsv10 acl letsencrypt-acl path_beg /.well-known/acme-challenge/ use_backend letsencrypt-backend if letsencrypt-acl default_backend main_apache_sites reqadd X-Forwarded-Proto:\ https if { ssl_fc } # Define hosts redirect prefix http://forum1domain.com code 301 if { hdr(host) -i www.forum1domain.com } acl host_discourse hdr(host) -i forum1domain.com redirect prefix http://forum2domain.com code 301 if { hdr(host) -i www.forum2domain.com } acl host_discourse_2 hdr(host) -i forum2domain.com redirect prefix http://forum3domain.com code 301 if { hdr(host) -i www.forum3domain.com } acl host_discourse_3 hdr(host) -i forum3domain.com #Redirect sites to HTTPS acl ssl_redirect_hosts hdr(Host) -i forum2domain.com acl ssl_redirect_hosts hdr(Host) -i forum1domain.com acl ssl_redirect_hosts hdr(Host) -i forum3domain.com redirect scheme https if ssl_redirect_hosts !{ ssl_fc } redirect scheme https code 301 if !{ ssl_fc } # figure out which one to use use_backend discourse_docker if host_discourse use_backend discourse_docker_2 if host_discourse_2 use_backend discourse_docker_3 if host_discourse_3 backend main_apache_sites server server1 127.0.0.1:8080 cookie A check cookie JSESSIONID prefix nocache backend discourse_docker server server2 127.0.0.1:8888 cookie A check cookie JSESSIONID prefix nocache backend discourse_docker_2 server server2 127.0.0.1:8889 cookie A check cookie JSESSIONID prefix nocache backend discourse_docker_3 server server2 127.0.0.1:8890 cookie A check cookie JSESSIONID prefix nocache backend letsencrypt-backend server letsencrypt 127.0.0.1:54321 ``` --- _[View the full topic](https://meta.discourse.org/t/set-up-discourse-on-a-server-with-existing-apache-sites/30013)._