Rad'Val's questions

I'm having a bunch of virtual hosts served behind a nginx reverse proxy. At the end of each there is a server that has valid certificates for the given virtual domain.

E.g.

api.example.com -> proxy_pass https://api.example.com; # which resolves locally to a docker instance that has the certificates for api.example.com

Now, my problem is that, the proxy server itself seems to be needing its own certificates and I don't understand why. Since domain names and subdomains don't get encrypted over https, why can't I simply forward the certificate of each proxied server? Or can I? How?

This is what I have so far:

server {
    listen      80;
    listen [::]:80;
    server_name *.example.com;

    location / {
        proxy_pass http://$http_host$uri$is_args$args;
    }
}

server {
    listen 443 ssl http2;
    listen [::]:443 ssl http2;
    server_name *.example.com;

    location / {
        proxy_pass https://$http_host$uri$is_args$args;
    }
}

But the second directive requires certificates.

Beginner question. I saw this mentioned on a website, considered a bad practice,but can't remember where and why. So, if I have an user which has access to files that Apache shouldn't have access, and I add this user to the Apache group, would that make a security hole. If yes, why (Apache shouldn't be able to access the sensitive files if for example the permission is 700) ?

I have an iOS app that communicates with an Apache 2.2 server. I would like to restrict the access to several directories so that only the app will be able to access them (no browser access, no crawlers, etc). What are my options?

I have Apache 2.2 installed. I want to set up my server so that for each user I create there is a public_html directory in which that user can put it's web content. Now, of course, making the directory is just a matter of mkdir, but how do I tell Apache to "watch" over that directory's contents (and serve them if required)

I used PATH = /Developer/Platforms/iPhoneOS.platform/Developer/usr/bin/:$PATH

But still my programs refuse to search in the given dir first. Do I need to do something else?

I tried yum install gcc-c++, however, the repos have an old version (4.1) which causes lots of problems and stops me from building a library. I would like to update it to latest. How can I do that?