Today I setup a openproject installation with docker. I pulled the code as documented and changed the default version from 10 to 11 (by the way: docker-compose.yml contains still a old version number). So far, so good.

The container are running behind a apache reverse proxy. The configuration:

<IfModule mod_ssl.c>
<VirtualHost *:443>
        ProxyRequests Off
        ServerName my.domain.de
        ProxyPreserveHost On

        RewriteEngine on

        <Proxy *>
                AddDefaultCharset off
                Order deny,allow
                Allow from all
        </Proxy>

        ProxyPass / http://127.0.0.1:8080/ retry=0
        ProxyPassReverse / http://127.0.0.1:8080/

        ErrorLog "|/usr/bin/cronolog ${APACHE_LOG_DIR}/my.domain.de/%Y/%m/%d/error.log --symlink=${APACHE_LOG_DIR}/my.domain.de/error.log"
        CustomLog "|/usr/bin/cronolog ${APACHE_LOG_DIR}/my.domain.de/%Y/%m/%d/access.log --symlink=${APACHE_LOG_DIR}/my.domain.de/access.log" combined

        RequestHeader set X-Forwarded-Proto "https"
        RequestHeader set X-Forwarded-Port "443"

        SSLEngine On
        SSLProtocol All -SSLv2 -SSLv3
        SSLHonorCipherOrder on

        # Prefer PFS, allow TLS, avoid SSL, for IE8 on XP still allow 3DES
        SSLCipherSuite "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+AESGCM EECDH EDH+AESGCM EDH+aRSA HIGH !MEDIUM !LOW !aNULL !eNULL !LOW !RC4 !MD5 !EXP !PSK !SRP !DSS"

        # Prevent CRIME/BREACH compression attacks
        SSLCompression Off

        # Commit to HTTPS only traffic for at least 180 days
        #Header add Strict-Transport-Security "max-age=15552000"

        SSLCertificateFile /etc/apache2/ssl/my.domain.de/my.domain.de.crt.pem
        SSLCertificateKeyFile /etc/apache2/ssl/my.domain.de/my.domain.de.key.pem
        SSLCertificateChainFile /etc/apache2/ssl/my.domain.de/my.domain.de.ca.pem

</VirtualHost>
</IfModule>

So far, first impression is, that most is working. But I found currently one point, it isn't working:

I configured a internal open smtp server for sending mails. So far everything is working fine, when I trigger the test mail function. I receive a mail. But when I create a new user, trigger the send invitation link function, nothing is done. I look into logs of the mail server but see not any connection try.

So, what is wrong here? Configuration test is working but not everything else.