Apache não realiza reverse proxy para a porta 3000, ajuda.

• Tengo un back en node+express usando el puerto 3000 deplegado en mi servidor, si accedo a http://api.dominio.com:3000/ funciona, me da una respuesta que he preparado correctamente (Lo tengo arrancado con pm2).
• Según he leido, al usar LetsEncrypt, solo funciona bajo el puerto 80 o 443 y para que la aplicación de express se cargue con https, tengo que hacer un reverse proxy con apache o nginx.

<VirtualHost *:443>
    ServerName api.dominio.com
    ServerAdmin webmaster@localhost

    SSLEngine on
    SSLCertificateFile  /etc/ssl/certs/ssl-cert-snakeoil.pem
    SSLCertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key

    ProxyRequests off
    ProxyPass / http://localhost:3000/
    ProxyPassReverse / http://localhost:3000/

</VirtualHost>

mariosgd94 disse:

si lo deseas en nginx seria

Inserir CODE, HTML ou PHP:

upstream webs {
        server 127.0.0.1:3000;
}

server {
      listen 80;
      server_name api.dominio.com;
      return 301 https://api.dominio.com$request_uri;
}


# HTTPS Server
server {
    listen 443 ssl;
    server_name api.dominio.com;
    ssl_certificate /etc/ssl/certs/ssl-cert-snakeoil.pem;
    ssl_certificate_key /etc/ssl/private/ssl-cert-snakeoil.key;

    location / {
        proxy_pass http://webs$request_uri;
        proxy_set_header X-Real-IP $http_x_forwarded_for;
        proxy_set_header Host $host;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header Connection "";
    }

}

Para generar los certificados he utilizado varias veces esta documentación:

How To Secure Nginx with Let's Encrypt on Ubuntu | DigitalOcean

Secure your Nginx server with a free SSL certificate from Let’s Encrypt on Ubuntu. Learn to install Certbot, configure HTTPS, and automate renewals.

www.digitalocean.com

Clique para expandir...