nginx and apache configuration

You can use this configuration if:

• nginx is your web front-end,
• apache is your web back-end,
• nginx is accessed by the client through https:443,
• apache is accessed by nginx through http:80.

If you don't use https just modify nginx conf to fit your needs (you should though)

/etc/nginx/sites-enabled/rss:

server {
    listen 80;
    server_name yourdn.root;
    rewrite ^ https://$server_name$request_uri? permanent;
}

server {
    listen 443;
    ssl on;
    ssl_certificate /etc/ssl/private/rss.pem;
    ssl_certificate_key /etc/ssl/private/rss.key;
    server_name yourdn.root;

    root /var/www/path/to/selfoss;

    location ~ ^/favicons/.*$ {
        try_files $uri /data/$uri;
    }

    location ~ ^/thumbnails/.*$ {
        try_files $uri /data/$uri;
    }

    location ~* ^/(data\/logs|data\/sqlite|config\.ini|\.ht|password) {
        deny all;
    }

    location / {
        **proxy_set_header X-Nginx-Scheme $scheme;**
        **proxy_set_header X-Forwarded-Port $server_port;**
        proxy_pass   http://127.0.0.1:8080/;
        include      /etc/nginx/proxy.conf;
    }
    access_log /var/log/nginx/rss-yourdn.root-access.log;
    error_log /var/log/nginx/rss-yourdn.root-error.log;
}

/etc/apache2/sites-enabled/rss:

<VirtualHost 127.0.0.1:8093>
    ServerAdmin contact@yourdn.root
    ServerName yourdn.root

    DocumentRoot /var/www/path/to/selfoss
    <Directory "/var/www/path/to/selfoss">
        Options FollowSymLinks
        Order Allow,Deny
        Allow From All
        AllowOverride All
    </Directory>

    ErrorLog ${APACHE_LOG_DIR}/error.log
    LogLevel warn

    CustomLog ${APACHE_LOG_DIR}/rss-yourdn.root-access.log combined
    ErrorLog ${APACHE_LOG_DIR}/rss-yourdn.root-error.log
</VirtualHost>