「MojoliciousでHTTP(S)の振り分けをリバースプロキシのバックエンドでも出来るようにしてみる」の例（Apache + mod_proxy）

## apache2_sites-available_proxy-ssl
<VirtualHost _default_:443>
    ServerName localhost.myapp

    ... ssl conf ...

    <Proxy *>
        Order deny,allow
        Allow from all
    </Proxy>

    ProxyRequests Off
    ProxyPreserveHost On

    ProxyPass / http://localhost:8080/
    ProxyPassReverse / http://localhost:8080/

    RequestHeader set X-Forwarded-HTTPS "1"

    # 環境に応じて適宜設定
    SetEnv proxy-initial-not-pooled 1
    SetEnv force-proxy-request-1.0 1
    SetEnv proxy-nokeepalive 1
</VirtualHost>

## apache2_sites-available_pxory
<VirtualHost *:80>
    ServerName localhost.myapp
    <Proxy *>
        Order deny,allow
        Allow from all
    </Proxy>

    ProxyRequests Off
    ProxyPreserveHost On

    ProxyPass / http://localhost:8080/
    ProxyPassReverse / http://localhost:8080/

    RequestHeader set X-Forwarded-HTTPS "0"

    # 環境に応じて適宜設定
    SetEnv proxy-initial-not-pooled 1
    SetEnv force-proxy-request-1.0 1
    SetEnv proxy-nokeepalive 1
</VirtualHost>

## MyApp.pm
package MyApp;
use Mojo::Base 'Mojolicious';

# This method will run once at server start
sub startup {
    my $self = shift;

    # Router
    my $r = $self->routes;

    # https onry
    my $ssl_r = $r->under(
        sub {
            my $self = shift;
            return 1 if $self->req->is_secure;
            $self->redirect_to($self->req->url->to_abs->scheme('https'));
         }
    );

    # http onry
    my $not_ssl_r = $r->under(
        sub {
            my $self = shift;
            return 1 unless $self->req->is_secure;
            $self->redirect_to($self->req->url->to_abs->scheme('http'));
        }
    );

    $r->get('/')->to('example#index')->name('index');
    $not_ssl_r->get('/not_ssl')->to('example#not_ssl')->name('not_ssl');
    $ssl_r->get('/ssl')->to('example#ssl')->name('ssl');
}

1;

## MyApp_Example.pm
package MyApp::Example;
use Mojo::Base 'Mojolicious::Controller';

# This action will render a template
sub index {}
sub not_ssl { $_[0]->render('example/index') }
sub ssl { $_[0]->render('example/index') }

1;

## nginx_sites-available_proxy
upstream app {
    server localhost:8080;
}

server {
    listen      80;
    listen      443 ssl;
    server_name localhost.proxy;

    ssl on;
    ssl_certificate /etc/ssl/certs/ssl-cert-snakeoil.pem;
    ssl_certificate_key /etc/ssl/private/ssl-cert-snakeoil.key;

    ssl_session_timeout 5m;

    ssl_protocols SSLv3 TLSv1;
    ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv3:+EXP;
    ssl_prefer_server_ciphers on;

    location / {
        proxy_pass http://app;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_set_header Host $host;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

        set $mode 0;
        if ($scheme = "https") {
            set $mode 1;
        }
        proxy_set_header X-Forwarded-HTTPS $mode;
    }

}

## templates_example_index.html.ep
% layout 'default';
% title 'SSL/NOT_SSL ROUTE - Mojolicious ' . $Mojolicious::VERSION;
<h2><%= $self->req->url->to_abs %></h2>
<ul>
  <li>
    <a href="<%= url_for('not_ssl') %>">not_ssl</a>
  </li>
  <li>
    <a href="<%= url_for('ssl') %>">ssl</a>
  </li>
</ul>
<pre><%= dumper $self->req->headers->to_hash %></pre>