# HG changeset patch
# User Robert Casties <casties@mpiwg-berlin.mpg.de>
# Date 1521052992 -3600
# Node ID 6d5e04a548482a95aeb32ab03dab9faef6826d9f
# Parent  395d56ba011253f0de7150af144ddcf72b1be045
updated server-setup documentation. fixed broken link.

diff -r 395d56ba0112 -r 6d5e04a54848 doc/src/site/markdown/server-setup.md
--- a/doc/src/site/markdown/server-setup.md	Fri Mar 09 15:34:20 2018 +0100
+++ b/doc/src/site/markdown/server-setup.md	Wed Mar 14 19:43:12 2018 +0100
@@ -1,8 +1,8 @@
-# Server setups for digilib
+# Server setup for digilib
 
 There are a variety of ways to deploy digilib on different server configurations for production sites. 
 
-Here are some examples.
+Here are some examples and tips.
 
 ## nginx as proxy
 
@@ -35,6 +35,65 @@
 }
 ```
 
-## Resources
+### Resources
 
 - the [nginx documentation](nginx.org/en/docs/)
+
+## Apache as proxy and load-balancer
+
+This is an example configuration for [Apache](https://httpd.apache.org/) as a proxy and load balancer for two instances of 
+digilib (one running on localhost, port 8080 and another on otherserver, port 8080), using SSL and http/2:
+
+```
+<VirtualHost *:443>
+    # HTTP/2 protocol (Apache 2.4.29 and later)
+    Protocols h2 http/1.1
+    ServerName digilib.example.com
+    SSLCertificateFile /etc/ssl/private/digilib-cert.pem
+    SSLCertificateKeyFile /etc/ssl/private/digilib-key.pem
+    SSLEngine on
+
+    DocumentRoot /var/www
+    <Directory />
+        Options FollowSymLinks
+        AllowOverride None
+    </Directory>
+    <Directory /var/www/>
+        Options Indexes FollowSymLinks MultiViews
+        AllowOverride None
+        Order allow,deny
+        allow from all
+    </Directory>
+
+    ErrorLog ${APACHE_LOG_DIR}/digilib-ssl-error.log
+    LogLevel warn
+    CustomLog ${APACHE_LOG_DIR}/digilib-ssl-access.log combined
+
+    # do not forward-proxy!
+    ProxyRequests off
+    # set proxy proto header
+    RequestHeader set X-Forwarded-Proto "https"
+    # digilib instances 
+    <Proxy balancer://digilibs>
+       BalancerMember http://127.0.0.1:8080
+       BalancerMember http://otherserver.example.com:8080
+    </Proxy>
+    # balance by busy-ness
+    ProxyPass /digitallibrary balancer://digilibs/digitallibrary lbmethod=bybusyness
+    ProxyPassReverse /digitallibrary balancer://digilibs/digitallibrary
+
+    # balancer-manager frontend (be careful!)
+    <Location /balancer-manager>
+        SetHandler balancer-manager
+        Require host localhost
+    </Location>
+</VirtualHost>
+```
+
+## Jetty behind a proxy
+
+When you are using [Jetty](https://www.eclipse.org/jetty/) as servlet container behind an Apache or nginx proxy
+then you should make sure that Jetty processes the `X-Forwarded-*` headers from the proxy server to derive the 
+correct request URL for the servlets.
+
+Please see [this information for Jetty 9.4](http://www.eclipse.org/jetty/documentation/9.4.x/configuring-connectors.html#_proxy_load_balancer_connection_configuration) or [this information for Jetty 8 and earlier versions](https://wiki.eclipse.org/Jetty/Tutorial/Apache#Configuring_mod_proxy_http).
diff -r 395d56ba0112 -r 6d5e04a54848 doc/src/site/site.xml
--- a/doc/src/site/site.xml	Fri Mar 09 15:34:20 2018 +0100
+++ b/doc/src/site/site.xml	Wed Mar 14 19:43:12 2018 +0100
@@ -31,7 +31,7 @@
     <menu name="Installation">
       <item name="Building digilib" href="build-maven.html"/>
       <item name="Installing digilib" href="install-digilib.html"/>
-      <item name="Server setups" href="server-setups.html"/>
+      <item name="Server setup" href="server-setup.html"/>
     </menu>
     <menu name="Configuration">
       <item name="Configuring digilib" href="digilib-config.html"/>