Nginx configuration

Geierlein’s HTML5 & JavaScript can be served right off any HTTP server. You simply have to proxy any access
to the Elster servers as those would be blocked by the browser’s XSS protection otherwise.

Geierlein accounts for that by not trying to directly access the servers. Instead the POST request is directed to proxy/Elster2/EMS/ElsterAnmeldung.

To provide a Geierlein installation on http://localhost:4080/ using Nginx, simple store the following configuration as /etc/nginx/conf.d/geierlein.conf/ or the like and unzip the Geierlein archive in /var/www

upstream elster-clearing-hosts {
        server datenannahme1.elster.de:443;
        server datenannahme2.elster.de:443;
        server datenannahme3.elster.de:443;
        server datenannahme4.elster.de:443;
}

server {
        listen 127.0.0.1:4080;

        root /srv/www/geierlein/chrome/content;
        index index.html;

        allow 127.0.0.1;
        deny all;

        location /proxy/ {
                rewrite ^/proxy(/.*) $1 break;
                proxy_pass https://elster-clearing-hosts;
                proxy_set_header Host '';
                proxy_ssl_certificate /etc/nginx/ssl/ssl-clientcert.pem;
                proxy_ssl_certificate_key /etc/nginx/ssl/ssl-clientcert.key;
        }
}

Also make sure to provide both ssl-clientcert.* files. You can download those here.