Mastodon Reverse Proxy für Apache2

Einige Mal hatte ich schon Anlauf genommen eine Mastodon Instanz auf meinem Server laufen zu lassen. Gescheitert ist dies meist am Reverse Proxy für den Apache2. Für Nginx ist das Ganze übrigens sehr gut beschrieben.

Nun habe ich aber eine funktionierende ausbaufähige Config mit der ich erst einmal meinen Apachen befeuern kann.

<VirtualHost *:80>
   ServerAdmin contact@domain.tld
   ServerName cybt.de
   Redirect Permanent / https://cybt.de/
</VirtualHost>

<VirtualHost *:443>
   ServerAdmin contact@domain.tld
   ServerName cybt.de

   Protocols h2 h2c http/1.1

   DocumentRoot /root/live/public/

   Header add Strict-Transport-Security "max-age=31536000"

   SSLEngine on
   SSLProtocol -all +TLSv1.2
   SSLHonorCipherOrder on
   SSLCipherSuite EECDH+AESGCM:AES256+EECDH:AES128+EECDH

   SSLCertificateFile /etc/letsencrypt/live/cybt.de/fullchain.pem
   SSLCertificateKeyFile /etc/letsencrypt/live/cybt.de/privkey.pem

   ProxyPreserveHost On
   RequestHeader set X-Forwarded-Proto "https"
   ProxyPass /api/v1/streaming/ ws://localhost:4000/
   ProxyPassReverse /api/v1/streaming/ ws://localhost:4000/
   ProxyPass / http://localhost:3000/
   ProxyPassReverse / http://localhost:3000/
   ErrorDocument 500 /500.html
   ErrorDocument 501 /500.html
   ErrorDocument 502 /500.html
   ErrorDocument 503 /500.html
   ErrorDocument 504 /500.html
</VirtualHost>

Hier noch die aktivierten Module des Webservers im Überblick:

Loaded Modules:
 core_module (static)
 so_module (static)
 watchdog_module (static)
 http_module (static)
 log_config_module (static)
 logio_module (static)
 version_module (static)
 unixd_module (static)
 access_compat_module (shared)
 alias_module (shared)
 auth_basic_module (shared)
 authn_core_module (shared)
 authn_file_module (shared)
 authz_core_module (shared)
 authz_host_module (shared)
 authz_user_module (shared)
 autoindex_module (shared)
 deflate_module (shared)
 dir_module (shared)
 env_module (shared)
 filter_module (shared)
 headers_module (shared)
 http2_module (shared)
 mime_module (shared)
 mpm_event_module (shared)
 negotiation_module (shared)
 proxy_module (shared)
 proxy_fcgi_module (shared)
 proxy_http_module (shared)
 proxy_wstunnel_module (shared)
 reqtimeout_module (shared)
 rewrite_module (shared)
 setenvif_module (shared)
 socache_shmcb_module (shared)
 ssl_module (shared)
 status_module (shared)