====== 4.4 IIS preusmjeravanje ======

Konfiguracija za non-Gateway promet.

===== IIS Binding =====

IIS osluškuje na portu 8443 (interno, nije javno):

<code powershell>
# Promjena IIS Site Bindinga
Import-Module WebAdministration
Set-WebBinding -Name "Default Web Site" -BindingInformation "*:8443:" -PropertyName Port -Value 8443
</code>

===== Proxy pravilo =====

Svi non-Gateway zahtjevi preusmjeravaju se na IIS:

<code javascript>
{
  "Match": {
    "Default": true
  },
  "Target": {
    "Type": "Http",
    "Url": "http://127.0.0.1:8443",
    "PreserveHostHeader": true,
    "ForwardClientCertificate": true
  }
}
</code>

===== Prosljeđivanje zaglavlja =====

<code javascript>
{
  "ForwardHeaders": {
    "X-Forwarded-For": true,
    "X-Forwarded-Proto": true,
    "X-Client-Cert": true,
    "X-Client-Cert-DN": true
  }
}
</code>

===== Sigurnost =====

IIS smije biti dostupan samo s localhosta:

<code xml>
<!-- web.config -->
<security>
  <ipSecurity allowUnlisted="false">
    <add ipAddress="127.0.0.1" allowed="true"/>
  </ipSecurity>
</security>
</code>