About using SSI for Web Apps

Question

About using SSI for Web Apps

Noriko 251

Is SSI available for web apps on Linux? Is there a way to enable it?

ajkuma 18,931 Reputation points Microsoft Employee

2023-11-10T10:48:16.2833333+00:00

@Noriko , Based on my understanding of your question,

On App Service Linux you can manage your TLS/SSL certificates, maintain the certificates and your application code separately and safeguard your sensitive data.

To see how to load a TLS/SSL certificate from a file in Node.js, PHP, Python, Java, or Ruby, see the documentation for the respective language on Linux platform.

Refer this doc section: Load certificate in Linux || (Linux custom containers (including built-in Linux containers).

Additionally, if you're looking to understand how to handle TLS termination in App Service.

In App Service, TLS termination happens at the network load balancers, so all HTTPS requests reach your app as unencrypted HTTP requests. If your app logic needs to check if the user requests are encrypted or not, inspect the X-Forwarded-Proto header. Language specific configuration guides, such as the Linux Node.js configuration guide, shows you how to detect an HTTPS session in your application code.

For secure a custom DNS name with a TLS/SSL binding in Azure App Service, checkout the steps outlined in this doc: Add and manage TLS/SSL certificates in Azure App Service

Kindly let us know if I misunderstood your ask or share more details about your exact requirement/issue.
Noriko 251 Reputation points

2023-11-10T11:05:06.2233333+00:00

Thank you. This time, I was asking about SSI, not SSL.
ajkuma 18,931 Reputation points Microsoft Employee

2023-11-11T18:37:35.1266667+00:00

Thanks for the follow-up and confirmation. I'm checking on this and will get back to you shortly.

Happy weekend.
ajkuma 18,931 Reputation points Microsoft Employee

2023-11-14T14:19:45.1533333+00:00

Following-up on this:

You may leverage Linux container using App Service for Linux Containers, rather than built-in App Service for Linux. This approach provides you with greater control over your app's runtime behavior.

Just to clarify, what is exactly are trying to accomplish by using SSI?
Are you just trying to create some shared data that can be included in multiple pages? If so, there are many ways to do that depending on your app framework (ASP.NET has parts for example; or Components if using server-side React).

Checkout these docs:

Migrate custom software to Azure App Service using a custom container

Configure a custom container for Azure App Service

Noriko 251

Thank you. In this case, we simply want to embed the code within the HTML.
In the case of App Service on Linux, which is not a container, it is probably nginx, so the following is an image as is in the config, but I think it will disappear when you restart, so I think it will be in a different config. .
-----------------
server {
     listen       80;
     server_name  localhost;
     ssi on;
-----------------
Also, the runtime is planned to use php8.

ajkuma 18,931 Reputation points Microsoft Employee

2023-11-18T19:25:06.26+00:00

Noriko , Just checking in to see if you had got a chance to see the previous response. If the answer helped (pointed, you in the right direction) > please click Accept Answer Or please share the requested/more info to help you better.

ajkuma 18,931 Reputation points Microsoft Employee

2023-11-10T10:48:16.2833333+00:00

@Noriko , Based on my understanding of your question,

On App Service Linux you can manage your TLS/SSL certificates, maintain the certificates and your application code separately and safeguard your sensitive data.

To see how to load a TLS/SSL certificate from a file in Node.js, PHP, Python, Java, or Ruby, see the documentation for the respective language on Linux platform.

Refer this doc section: Load certificate in Linux || (Linux custom containers (including built-in Linux containers).

Additionally, if you're looking to understand how to handle TLS termination in App Service.

In App Service, TLS termination happens at the network load balancers, so all HTTPS requests reach your app as unencrypted HTTP requests. If your app logic needs to check if the user requests are encrypted or not, inspect the X-Forwarded-Proto header. Language specific configuration guides, such as the Linux Node.js configuration guide, shows you how to detect an HTTPS session in your application code.

For secure a custom DNS name with a TLS/SSL binding in Azure App Service, checkout the steps outlined in this doc: Add and manage TLS/SSL certificates in Azure App Service

Kindly let us know if I misunderstood your ask or share more details about your exact requirement/issue.
Noriko 251 Reputation points

2023-11-10T11:05:06.2233333+00:00

Thank you. This time, I was asking about SSI, not SSL.
ajkuma 18,931 Reputation points Microsoft Employee

2023-11-11T18:37:35.1266667+00:00

Thanks for the follow-up and confirmation. I'm checking on this and will get back to you shortly.

Happy weekend.
ajkuma 18,931 Reputation points Microsoft Employee

2023-11-14T14:19:45.1533333+00:00

Following-up on this:

You may leverage Linux container using App Service for Linux Containers, rather than built-in App Service for Linux. This approach provides you with greater control over your app's runtime behavior.

Just to clarify, what is exactly are trying to accomplish by using SSI?
Are you just trying to create some shared data that can be included in multiple pages? If so, there are many ways to do that depending on your app framework (ASP.NET has parts for example; or Components if using server-side React).

Checkout these docs:

Migrate custom software to Azure App Service using a custom container

Configure a custom container for Azure App Service
Noriko 251 Reputation points

2023-11-15T00:16:57.4666667+00:00

Thank you. In this case, we simply want to embed the code within the HTML. In the case of App Service on Linux, which is not a container, it is probably nginx, so the following is an image as is in the config, but I think it will disappear when you restart, so I think it will be in a different config. . ----------------- server { listen 80; server_name localhost; ssi on; ----------------- Also, the runtime is planned to use php8.
ajkuma 18,931 Reputation points Microsoft Employee

2023-11-18T19:25:06.26+00:00

Noriko , Just checking in to see if you had got a chance to see the previous response. If the answer helped (pointed, you in the right direction) > please click Accept Answer Or please share the requested/more info to help you better.

Answer 1

Thanks for the follow-up and additional info.

Based on your requirements, you may leverage Azure App service Linux custom container rather than Azure App Service built-in Linux (not feasible option for SSI).
NGINX Rewrite Rules for Azure App Service Linux PHP 8.x

PHP version 8.x uses NGINX as the default configuration file on Azure app services Linux and the default location of this file on server is - /etc/nginx/sites-available/default.

Just to add more info:
You may make customized Nginx configuration based on the default one, changes to the /home/default file. Set up a custom startup script and modify the existing NGINX site configuration.

In the Azure Portal > Navigate to your WebApp > Go to `Configuration >> General settings >> Add a Startup Command”

I have also relayed your feedback internally to our product team.

See:
Azure App Service on Linux FAQ
How to set Nginx headers

About using SSI for Web Apps

1 answer

Activity