Example

## www.domain.nl go to www.domain.nl/fiets
<LocationMatch "^/$">
   Redirect permanent "/" "/fiets/"
</LocationMatch>

ProxyPass / https://www.domain.nl/ retry=0
ProxyPassReverse / https://www.domain.nl/

#ProxyPass / https://www.domain.nl:8443/ retry=0
#ProxyPassReverse / https://www.domain.nl:8443/

Identifying the partition type

As this method focuses on working with LVM, we will first confirm that our partition type is actually Linux LVM by running the below command.

fdisk -l

A lot of what I’m going to go through in this post I learned from this YouTube video from BranchCache Bob, here’s the video. There are some differences, which I’ll point out below.  

The Problem

You have multiple VLANs, and have a mixture of devices with BIOS and UEFI and need to boot them from the network using PXE from a WDS server.

Prerequisites

• A Windows Deployment Server.
• A Microsoft DHCP server (does not have to be running on the same server as WDS).
• Have the DHCP server’s IP as a helper address on your network switch for each VLAN you want to boot.

Transfer myCert.pfx to yout Linux WebServer

Export your private.key
openssl pkcs12 -in myCert.pfx -nocerts -out private.key
Enter Import Password:
MAC verified OK

remove password form key
openssl rsa -in private.key -out private-npw.key
Enter Import Password:
MAC verified OK

Check your key
cat private.key

md C:\Temp\VcRedist
Set-ExecutionPolicy -ExecutionPolicy Unrestricted
Install-Module VcRedist
Import-Module VcRedist
$VcList = Get-VcList | Get-VcRedist -Path "C:\Temp\VcRedist"
$VcList | Install-VcRedist -Path C:\Temp\VcRedist

• (optional) Remove the password from the Private Key by following the steps listed below: openssl rsa -in server.key -out nopassword.keyNote: Enter the pass phrase of the Private Key.
  
• Combine the private key, public certificate and any 3rd party intermediate certificate files:
  cat nopassword.key > server.pem
  cat server.crt >> server.pemNote: Repeat this step as needed for third-party certificate chain files, bundles, etc:
  cat intermediate.crt >> server.pem

lets check and see what is stored inside the keystore.
You can do this by using the following command:

sudo keytool -list -keystore /var/lib/unifi/keystore

password is aircontrolenterprise

delete it using the following command:
sudo keytool -delete -alias unifi -keystore /var/lib/unifi/keystore

“openssl pkcs12 -export -in -inkey -out -passout pass:aircontrolenterprise -name unifi” or
“openssl pkcs12 -export -nodes -out -inkey -in -certfile -passout pass:aircontrolenterprise -name unifi”
then
“keytool -importkeystore -srckeystore -srcstorepass aircontrolenterprise -destkeystore /var/lib/unifi/keystore -deststorepass aircontrolenterprise -alias unifi -trustcacerts”

The left to do is to restart the Unifi controller and you are good to go!
“systemctl restart unifi”