Apache config for Jetty/YouTrack

templates/apache_default

+# Use this one if you want to force SSL
+<VirtualHost *:80>
+  ServerName youtrack.paragon-es.de
+  ServerSignature Off
+
+  RewriteEngine on
+  RewriteCond %{HTTPS} !=on
+  RewriteRule .* https://%{SERVER_NAME}%{REQUEST_URI} [NE,R,L]
+</VirtualHost>
+
+# Without SSL, use this one
+<VirtualHost *:80>
+  ServerName youtrack.paragon-es.de
+  ServerSignature Off
+
+    ProxyRequests Off
+    <Proxy *:80>
+      Order deny,allow
+      Allow from all
+    </Proxy>
+    ProxyPass / http://127.0.0.1:8085/
+    ProxyPassReverse / http://127.0.0.1:8085/
+</VirtualHost>

templates/apache_default_ssl

+<VirtualHost _default_:443>
+    ServerName youtrack.paragon-es.de
+    ServerAdmin admin@paragon-es.de
+    ServerSignature Off
+
+    ProxyPreserveHost On
+    AllowEncodedSlashes NoDecode
+    RequestHeader set X_FORWARDED_PROTO 'https'
+
+    ProxyRequests Off
+    <Proxy *:80>
+      Order deny,allow
+      Allow from all
+    </Proxy>
+    ProxyPass /~socket.io/1/websocket ws://127.0.0.1:8085/~socket.io/1/websocket
+    ProxyPass / http://127.0.0.1:8085/
+    ProxyPassReverse / http://127.0.0.1:8085/
+
+    ErrorLog ${APACHE_LOG_DIR}/youtrack-error.log
+    LogLevel warn
+    LogFormat "%{X-Forwarded-For}i %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" proxy
+    SetEnvIf X-Forwarded-For "^.*\..*\..*\..*" forwarded
+    CustomLog ${APACHE_LOG_DIR}/youtrack_ssl_access.log combined env=!forwarded
+    CustomLog ${APACHE_LOG_DIR}/youtrack_ssl_access.log proxy env=forwarded
+
+    SSLEngine on
+    SSLCertificateChainFile /etc/ssl/private/Intermediate_CA_Bundle.crt
+    SSLCertificateFile /etc/ssl/private/paragon-es.de.crt
+    SSLCertificateKeyFile /etc/ssl/private/paragon-es.de.key
+
+    <FilesMatch "\.(cgi|shtml|phtml|php)$">
+        SSLOptions +StdEnvVars
+    </FilesMatch>
+    <Directory /usr/lib/cgi-bin>
+        SSLOptions +StdEnvVars
+    </Directory>
+    BrowserMatch "MSIE [2-6]" \
+        nokeepalive ssl-unclean-shutdown \
+        downgrade-1.0 force-response-1.0
+    # MSIE 7 and newer should be able to use keepalive
+    BrowserMatch "MSIE [17-9]" ssl-unclean-shutdown
+</VirtualHost>