herdiansah571 commented on issue #8267:
URL: https://github.com/apache/cloudstack/issues/8267#issuecomment-1827412891
I have succesfully nginx reverse proxy use self-signed certificate ssl for
mgmt servers, here my setting :
server {
listen 192.168.200.25:80;
server_name 192.168.200.25;
## redirect http to https ##
rewrite ^ https://$server_name/client/ permanent;
}
server {
listen 192.168.200.25:443;
server_name 192.168.200.25;
rewrite ^/$ https://192.168.200.25/client/ permanent;
### ssl config - customize as per your cert files ###
ssl on;
ssl_certificate /etc/nginx/ssl/certs/nginx-selfsigned.crt;
ssl_certificate_key /etc/nginx/ssl/private/nginx-selfsigned.key;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
ssl_prefer_server_ciphers on;
keepalive_timeout 70;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m;
## Reverse Proxy
location / {
add_header Front-End-Https on;
add_header Cache-Control "public, must-revalidate";
add_header Strict-Transport-Security "max-age=63072000; includeSubdomains;
preload";
add_header X-Frame-Options "DENY";
proxy_pass http://127.0.0.1:8080;
proxy_next_upstream error timeout invalid_header http_500 http_502 http_503;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}
but I don't know how to setup nginx reverse proxy for console proxy apache
cloudstack, do you have reference for setup nginx reverse proxy for console
proxy apache cloudstack ?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
