Merge pull request #1 from Xarin/master

Basic Apache configuration

Author: Maxou44

README md

@@ -0,0 +1,13 @@
+## Apache configuration
+
+This repository contains Apache configuration examples for the UnicornTranscoder project. It still has a few bugs but seems to work well enough to stream through a browser, Android phone/tv or iPhone. Roku seems unhapy though.
+
+## UnicornTranscoder Project
+
+- [UnicornTranscoder](https://github.com/UnicornTranscoder/UnicornTranscoder)
+- [UnicornLoadBalancer](https://github.com/UnicornTranscoder/UnicornLoadBalancer)
+- [UnicornFFMPEG](https://github.com/UnicornTranscoder/UnicornFFMPEG)
+
+## Credit
+https://gist.github.com/HazCod/3ef10a15f52c171a7839
+https://gist.github.com/hharsunen/afc9f66c94b7bb9c62ed37e4e14507a6

README.md

@@ -0,0 +1,59 @@
+<VirtualHost *:80>
+   ServerName myplex.com
+   Redirect permanent / https://myplex.com
+</VirtualHost>
+
+<VirtualHost *:443>
+  ServerName myplex.com
+
+  # Logs
+  ErrorLog /var/log/httpd/transcoder.myplex.com-error_log
+  CustomLog /var/log/httpd/transcoder.myplex.com-access_log common
+
+  # SSL
+  SSLStrictSNIVHostCheck On
+  SSLEngine On
+  SSLCertificateFile "/etc/letsencrypt/live/myplex.com/fullchain.pem"
+  SSLCertificateKeyFile "/etc/letsencrypt/live/myplex.com/privkey.pem"
+  SSLProtocol +TLSv1.2
+  ProtocolsHonorOrder On
+  Protocols h2 http/1.1
+
+  Options -Includes -ExecCGI
+  RewriteEngine On
+  LimitRequestBody 512000
+
+  Header always set Strict-Transport-Security "max-age=63072000; includeSubdomains; preload"
+  Header always set X-Frame-Options DENY
+  FileETag None
+  TraceEnable off
+  Header edit Set-Cookie ^(.*)$ ;HttpOnly;Secure
+  Header set X-XSS-Protection "1; mode=block"
+  Timeout 60
+
+  <Location /:/websockets/notifications>
+    ProxyPass wss://<LoadBalancerIP>:<LoadBalancerPort>/:/websockets/notifications
+    ProxyPassReverse wss://<LoadBalancerIP>:<LoadBalancerPort>/:/websockets/notifications
+  </Location>
+
+  # Proxy configuration
+  <Proxy "*">
+    Require all granted
+  </Proxy>
+
+  ProxyRequests Off
+  ProxyPreserveHost On
+  SSLProxyEngine on
+
+  SSLProxyProtocol -ALL +TLSv1.2
+
+  ProxyPass / http://<LoadBalancerIP>:<LoadBalancerPort>/
+  ProxyPassReverse / http://<LoadBalancerIP>:<LoadBalancerPort>/
+
+  RewriteCond %{REQUEST_URI} !^/web
+  # plex web uses query strings, not headers
+  RewriteCond %{QUERY_STRING} !(.*(?:^|&))X-Plex-Device=(.*)((?:&|$).*)
+  RewriteCond %{HTTP:X-Plex-Device} ^$
+  RewriteCond %{REQUEST_METHOD} !^(OPTIONS)$
+  RewriteRule ^/$ /web/$1? [R,L]
+</VirtualHost>

UnicornLoadBalancer.conf

@@ -0,0 +1,24 @@
+<VirtualHost *:80>
+   ServerName transcoder.myplex.com
+   Redirect permanent / https://transcoder.myplex.com
+</VirtualHost>
+
+<VirtualHost *:443>
+  ServerName transcoder.myplex.com
+
+  # Logs
+  ErrorLog /var/log/httpd/transcoder.myplex.com-error_log
+  CustomLog /var/log/httpd/transcoder.myplex.com-access_log common
+
+  # SSL managed by Certbot
+  SSLEngine On
+  SSLProxyEngine on
+  SSLCertificateFile "/etc/letsencrypt/live/myplex-t1.com/fullchain.pem"
+  SSLCertificateKeyFile "/etc/letsencrypt/live/myplex-t1.com/privkey.pem"
+
+  # Proxy
+  ProxyRequests Off
+  ProxyPreserveHost On
+  ProxyPass / http://<UnicornTranscoderIP>:<port>/
+  ProxyPassReverse / http://<UnicornTranscoderIP>:<port>/
+</VirtualHost>