No, it is there: Univention Corporate Server: no renewal possible - #17 by Mornsgrans
Edit: It became hidden by the forum spam filter and needed a review by admin.
The folder /etc/apache2/ucs-sites.conf.d contains three config files. All these files were auto-generated by UCS last summer.
1st:
root@ucs:/etc/univention/letsencrypt# cat /etc/apache2/ucs-sites.conf.d/ucs-sites.conf
#...
RewriteEngine on
RewriteOptions Inherit
ProxyPreserveHost on
ProxyTimeout 600
RequestHeader set "X-Forwarded-Proto" expr=%{REQUEST_SCHEME}
RequestHeader set "X-Forwarded-SSL" expr=%{HTTPS}
DocumentRoot /var/www/
CustomLog /var/log/apache2/access.log combined
RedirectMatch ^/$ /univention/
2nd:
root@ucs:/etc/univention/letsencrypt# cat /etc/apache2/ucs-sites.conf.d/collabora-code.conf
#######################################
# generated by code app join script, do not edit manually #
#######################################
# Encoded slashes need to be allowed
AllowEncodedSlashes NoDecode
# Container uses a unique non-signed certificate
SSLProxyVerify None
SSLProxyCheckPeerCN Off
SSLProxyCheckPeerName Off
# static html, js, images, etc. served from loolwsd
# loleaflet is the client part of LibreOffice Online
ProxyPass /loleaflet https://127.0.0.1:9980/loleaflet retry=0
ProxyPassReverse /loleaflet https://127.0.0.1:9980/loleaflet
# WOPI discovery URL
ProxyPass /hosting/discovery https://127.0.0.1:9980/hosting/discovery retry=0
ProxyPassReverse /hosting/discovery https://127.0.0.1:9980/hosting/discovery
# Main websocket
ProxyPassMatch "/lool/(.*)/ws$" wss://127.0.0.1:9980/lool/$1/ws nocanon
# Admin Console websocket
ProxyPass /lool/adminws wss://127.0.0.1:9980/lool/adminws
# Download as, Fullscreen presentation and Image upload operations
ProxyPass /lool https://127.0.0.1:9980/lool
ProxyPassReverse /lool https://127.0.0.1:9980/lool
# Capabilities
ProxyPass /hosting/capabilities https://127.0.0.1:9980/hosting/capabilities retry=0
ProxyPassReverse /hosting/capabilities https://127.0.0.1:9980/hosting/capabilities
3rd:
root@ucs:/etc/univention/letsencrypt# cat /etc/apache2/ucs-sites.conf.d/univention-portal.conf
#...
ProxyPass /univention/portal/portal.json http://127.0.0.1:8095/ retry=0
ProxyPassReverse /univention/portal/portal.json http://127.0.0.1:8095/
<Directory /var/www/univention/portal/>
<FilesMatch "(portal|apps)\.json|portal\.css">
Header set Cache-Control "max-age=0, must-revalidate"
</FilesMatch>
</Directory>
<Directory /var/www/univention/portal/icons>
Header set Cache-Control "max-age=0, must-revalidate"
</Directory>
Maybe I could solve the http-problem:
after setting
ucr set apache2/force_https=yes
and restarting Apache I did the curl instructions mentioned above again:
root@ucs:/etc/univention/letsencrypt# curl -I http://web.kmvw-io.de/.well-known/acme-challenge/HHIBIWc28HA8J_7-m3jnO65eyVUmLvxc99EzolEV0LA
HTTP/1.1 301 Moved Permanently
Date: Sat, 05 Feb 2022 20:15:03 GMT
Server: Apache/2.4.25 (Univention)
Location: https://web.kmvw-io.de/%5bhttps:/web.kmvw-io.de/.well-known/acme-challenge/HHIBIWc28HA8J_7-m3jnO65eyVUmLvxc99EzolEV0LA
Content-Type: text/html; charset=iso-8859-1
root@ucs:/etc/univention/letsencrypt# curl -I http://ucs.kmvw-io.de/.well-known/acme-challenge/HHIBIWc28HA8J_7-m3jnO65eyVUmLvxc99EzolEV0LA
HTTP/1.1 301 Moved Permanently
Date: Sat, 05 Feb 2022 20:15:30 GMT
Server: Apache/2.4.25 (Univention)
Location: https://ucs.kmvw-io.de/%5bhttps:/ucs.kmvw-io.de/.well-known/acme-challenge/HHIBIWc28HA8J_7-m3jnO65eyVUmLvxc99EzolEV0LA
Content-Type: text/html; charset=iso-8859-1
Please notice the entry in the lines starting with "Location"
