Etherpad Lite

Notes

Apache

<VirtualHost *:80>
   ServerAdmin admin@yourdoma.in
   ServerName etherpad.yourdoma.in
   Redirect Permanent / https://etherpad.yourdoma.in/
</VirtualHost>

<VirtualHost *:443>
   <Directory /home/etherpad/etherpad-lite/src/static/>
      Require all granted
   </Directory>
   ServerAdmin admin@yourdoma.in
   ServerName etherpad.yourdoma.in

   DocumentRoot /home/etherpad/etherpad-lite/src/static/

   Header always set Referrer-Policy "strict-origin-when-cross-origin"
   Header always set Strict-Transport-Security "max-age=31536000"

   SSLEngine on
   SSLProtocol -all +TLSv1.2
   SSLHonorCipherOrder on
   SSLCipherSuite EECDH+AESGCM:AES256+EECDH:AES128+EECDH
   SSLCompression off
   SSLSessionTickets off

   SSLCertificateFile          /etc/letsencrypt/live/etherpad.yourdoma.in/fullchain.pem
   SSLCertificateKeyFile       /etc/letsencrypt/live/etherpad.yourdoma.in/privkey.pem

   ProxyPreserveHost On
   RequestHeader set X-Forwarded-Proto "https"

   ProxyPassMatch ^/(.well-known/acme-challenge) !

   ProxyPass / http://localhost:9001/
   ProxyPassReverse / http://localhost:9001/

</VirtualHost>

SystemD

[Unit]
Description=Etherpad Lite server
After=network.target

[Service]
Type=simple
User=etherpad
WorkingDirectory=/home/etherpad/etherpad-lite
ExecStart=/bin/sh /home/etherpad/etherpad-lite/bin/run.sh
TimeoutSec=3600
Restart=always

[Install]
WantedBy=multi-user.target