Re: [Sks-devel] Seeking peers for keyserver.opensuse.org

[Lars Vogdt]

Am Fri, 8 Apr 2016 09:30:34 +0100
schrieb Chris Boot <address@hidden>:
> I'm sure you can do it without dropping Nginx; I don't think the web
> server / reverse proxy has much to do with it. I'd imagine you just
> need to forward to your internal port 11371 using the same method on
> port 80 as you do on your external port 11371.

You are absolutely right. 



> What I ended up doing is forcing sks's to listen to localhost only
> for HKP:
> 
> hkp_address: 127.0.0.1 ::1
> 
> Then I have Apache listen on my external IP addresses on port 11371
> (not the catch-all 0.0.0.0 or :: address) and proxy requests through.

...and that's what I do now also via nginx.

Thanks for your pointer!

With kind regards,
Lars