Nginx通过https协议反向代理Confluence 详细配置过程
发表于:2022-09-28 |
Tomcat 配置不正确
 
The Tomcat server.xml 配置不正确:
 
scheme should be 'https'
proxyName should be 'wiki.xxx.com'
proxyPort should be 'https'
 
故障排除
1、安装Confluence 

2、Nginx

3、confluence配置

vim /opt/atlassian/confluence/conf/server.xml
<Connector port="8090" connectionTimeout="20000" redirectPort="8443"
           maxThreads="48" minSpareThreads="10"
           enableLookups="false" acceptCount="10" debug="0" URIEncoding="UTF-8"
           protocol="org.apache.coyote.http11.Http11NioProtocol"/>
改为

        <Connector port="8090" connectionTimeout="20000" redirectPort="8443"
                   maxThreads="48" minSpareThreads="10"
                   enableLookups="false" acceptCount="10" debug="0" URIEncoding="UTF-8"
                   protocol="org.apache.coyote.http11.Http11NioProtocol"
                   scheme="https" secure="true" proxyName="wiki" proxyPort="443"/>
重启confluence

service confluence restart
4、配置nginx server.conf

vim wiki.xxx.com.conf
 
 
upstream wiki.xxx.com{
       server  172.16.84.252:8090;
}    
server {
        #listen       80 ;
        listen 443 ssl;
        server_name wiki.xxx.com;
        ssl_certificate   ssl/4152171.cn.pem;
        ssl_certificate_key  ssl/4152171.cn.key;
        ssl_session_timeout 5m;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_ciphers AESGCM:ALL:!DH:!EXPORT:!RC4:+HIGH:!MEDIUM:!LOW:!aNULL:!eNULL;
        ssl_prefer_server_ciphers on;
 
    location / {
        client_max_body_size 100m;
        proxy_set_header X-Forwarded-Host $host;
        proxy_set_header X-Forwarded-Server $host;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_pass  http://wiki.xxx.com;
    }
    location /synchrony {
        client_max_body_size 100m;
        proxy_set_header X-Forwarded-Host $host;
        proxy_set_header X-Forwarded-Server $host;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_pass  http://wiki.xxx.com/synchrony;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "Upgrade";
    }
 
        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }
 
    }
server {
       listen       80;
       server_name  wiki.xxx.com;
       rewrite ^ https://$http_host$request_uri? permanent;
}
reload nginx,配置即可
上一篇:
Etcd v3命令行安装
下一篇:
ubuntu16安装zabbix-agent