0k-charms/apache/README.rst

SSH Tunnel
----------

On the server side, you can configure your compose file::

    apache:
      options:
        ssh-tunnel:
          domain: ssh.domain.com     ## required
          #ssh: ...                  ## required, but automatically setup if you
                                     ## provide a ``cert-provider`` to ``apache``.


On the client side you should add this to your ``~/.ssh/config``::

    Host ssh.domain.com
        Port 443
        ProxyCommand proxytunnel -q -E -p ssh.domain.com:443 -d ssh.domain.com:22
        DynamicForward 1080
        ServerAliveInterval 60

If it doesn't work, you can do some checks thanks to this command::

    $ proxytunnel -E -p ssh.domain.com:443 -d ssh.domain.com:22 -v \
        -H "User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Win32)\n"