Nginx通过https来代理Confluence

场景

通过在nginx中增加ssl证书认证，并将客户的请求转发到JIRA中。JIRA中无需再配置认证证书。

在以下配置过程中，我们假定需要进行的配置上下文件为

Confluence人访问地址为：http://confluence.hktxcn.com 现需要通过https来进行访问，即地址为：https://confluence.hktxcn.com

Confluence的IP地址为： 10.10.1.1 端口号为8090
Nginx的IP地址为： 20.20.1.1 端口号为80

信息来源

https://confluence.atlassian.com/doc/running-confluence-behind-nginx-with-ssl-858772080.html

步骤一：修改配置文件server.xml

<!--

=========
         HTTP - Proxying Confluence via Apache or Nginx over HTTP

         If you're proxying traffic to Confluence over HTTP, uncomment the connector below and comment out the others.
         Make sure you provide the right information for proxyName and proxyPort.

         For more information see:
            Apache - https://confluence.atlassian.com/x/4xQLM
            nginx - https://confluence.atlassian.com/x/TgSvEg

=========
        -->

        

        

        

        
        
        

        <Engine name="Standalone" defaultHost="localhost" debug="0">
            <Host name="localhost" debug="0" appBase="webapps" unpackWARs="true" autoDeploy="false" startStopThreads="4">
                <Context path="" docBase="../confluence" debug="0" reloadable="false" useHttpOnly="true">
                    
                    <Manager pathname=""/>
                    <Valve className="org.apache.catalina.valves.StuckThreadDetectionValve" threshold="60"/>
                </Context>

                <Context path="${confluence.context.path}/synchrony-proxy" docBase="../synchrony-proxy" debug="0"
                         reloadable="false" useHttpOnly="true">
                    <Valve className="org.apache.catalina.valves.StuckThreadDetectionValve" threshold="60"/>
                </Context>
            </Host>
        </Engine>
    </Service>
</Server>

<!--
        <Connector port="8090" connectionTimeout="20000" redirectPort="8443"
                   maxThreads="48" minSpareThreads="10"
                   enableLookups="false" acceptCount="10" debug="0" URIEncoding="UTF-8"
                   protocol="org.apache.coyote.http11.Http11NioProtocol"/>

-->

<Connector port="8090" connectionTimeout="20000" redirectPort="8443"
                   maxThreads="48" minSpareThreads="10"
                   enableLookups="false" acceptCount="10" debug="0" URIEncoding="UTF-8"
                   protocol="org.apache.coyote.http11.Http11NioProtocol"
                   scheme="https" secure="true" proxyName="confluence.hktxcn.com" proxyPort="443"/>

第三步

server {
    listen confluence.hktxcn.com:80;
    server_name confluence.hktxcn.com;

    listen 443 default ssl;
    ssl_certificate     /usr/local/etc/nginx/ssl/nginx.crt;
    ssl_certificate_key /usr/local/etc/nginx/ssl/nginx.key;

    ssl_session_timeout 5m;

    location / {
        client_max_body_size 100m;
        proxy_set_header X-Forwarded-Host $host;
        proxy_set_header X-Forwarded-Server $host;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_pass http://10.10.1.1:8090;
    }
    location /synchrony {
        proxy_set_header X-Forwarded-Host $host;
        proxy_set_header X-Forwarded-Server $host;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_pass http://10.10.1.1:8091/synchrony;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "Upgrade";
    }
}

说明

ssl_certificate和ssl_certificate_key填写证书存放的地址位置

这里指响应超时时间为5分钟

将请求转发到 http://10.10.1.1:8090地址上

Space shortcuts

Page tree

场景

步骤一：修改配置文件server.xml