1258157 - Document how to run Bugzilla as a PSGI application from Apache

Status: RESOLVED FIXED

(Bugzilla :: Documentation, defect)

Description

[Frédéric Buclin]

mod_proxy lets Apache pass requests to plackup. This significantly improves performances.

Comment 1

[Frédéric Buclin]

Attachment: patch, v1

Comment 2

[Gervase Markham [:gerv]]

Comment on attachment 8732569 [details] [diff] [review]
patch, v1

Dylan knows this stuff much better than me...

Gerv

Comment 3

[David Lawrence [:dkl]]

Comment on attachment 8732569 [details] [diff] [review]
patch, v1

Review of attachment 8732569 [details] [diff] [review]:
-----------------------------------------------------------------

::: docs/en/rst/installing/apache.rst
@@ +173,5 @@
> +   .. code-block:: apache
> +
> +      <Location /bugzilla>
> +          ProxyPass "http://localhost:5000"
> +      </Location>

I was not able to get this to work as described here unless the Plack webapp is in the root of the webserver. The "Location /bugzilla" would work for the initial request, but all requests after would drop off /bugzilla from the URL.

On a system like mine where I have multiple bugzilla installations each as a subdirectory under main document root, I had to instead configure it as:

ProxyPass /1258187/ http://localhost:5000/
<Location /1258187>
    RequestHeader set Request-Base /1258187
</Location>

Otherwise all of the static files would 404. Am I doing this incorrectly or do the docs need to be more explicit?

Comment 4

[David Lawrence [:dkl]]

Also the docs state it is also important to set permissions for proxying for security purposes, below is an example.

    <Proxy *>
      Order allow,deny
      Allow from all
    </Proxy>

dkl

Comment 5

[Dylan Hardison [:dylan] (he/him)]

Comment on attachment 8732569 [details] [diff] [review]
patch, v1

Review of attachment 8732569 [details] [diff] [review]:
-----------------------------------------------------------------

Some configuration is required too, the param inbound_proxies needs to be set (even for 127.0.0.1)
else remote_ip() will return the wrong value.

Comment 6

[Frédéric Buclin]

(In reply to David Lawrence [:dkl] from comment #3)
> Otherwise all of the static files would 404. Am I doing this incorrectly or
> do the docs need to be more explicit?

I don't need to do all the steps you describe. My Apache + Plack installation works exactly as described here. FYI, my Bugzilla installation is located in /var/www/html/bugzilla/.

Comment 7

[David Lawrence [:dkl]]

(In reply to Frédéric Buclin from comment #6)
> (In reply to David Lawrence [:dkl] from comment #3)
> > Otherwise all of the static files would 404. Am I doing this incorrectly or
> > do the docs need to be more explicit?
> 
> I don't need to do all the steps you describe. My Apache + Plack
> installation works exactly as described here. FYI, my Bugzilla installation
> is located in /var/www/html/bugzilla/.

Cool. Can you provide me your httpd config so I can compare to mine. I have my document root somewhere other than /var/www/html but it should be similar to your setup.

dkl

Comment 8

[Frédéric Buclin]

(In reply to David Lawrence [:dkl] from comment #4)
> Also the docs state it is also important to set permissions for proxying for
> security purposes, below is an example.

This is only necessary for direct proxy. My example uses reverse proxy, which doesn't require it.

Comment 9

[Frédéric Buclin]

Attachment: patch, v2

dkl: does this configuration work for you?

Comment 10

[Frédéric Buclin]

(err... I didn't mean to click on the User Story field)

The documentation will have to be updated once bug 1261538 is fixed as I have to mention the headers Apache must pass to make attachments work.

Comment 11

[Frédéric Buclin]

Attachment: patch, v2.1

Takes bug 1261538 into account.

Comment 12

[Dylan Hardison [:dylan] (he/him)]

Comment on attachment 8739616 [details] [diff] [review]
patch, v2.1

Review of attachment 8739616 [details] [diff] [review]:
-----------------------------------------------------------------

doc patches should never this long, I'm sorry.

This reads fine and looks correct

r=dylan

Comment 13

[Frédéric Buclin]

To ssh://[e-mail]/bugzilla/bugzilla.git
   74f6910..f9530b7  master -> master