Sorry for the spam earlier - I was finally able to get things running behind the second option (nginx as an https proxy).
Cheers, -Chris On 12/6/16 11:57 AM, Chris Moody wrote: > Hello all. > > Wanted to first thank everyone for their work to streamline and > integrate so many pieces together in such a cool package. I'm a huge > fan of the OMD model. I used to have a bunch of custom routines I had > built that were trying to accomplish some of the same goals, but this > approach is -so- much better. > > I could use a hand though with what should hopefully be something > simple that I just haven't come across in the Docs. I need to make > all my instances SSL only instead of just plaintext http. Even if > it's just the login page that's SSL, my user-base will not be > comfortable with plaintext http logins. > > I've tried tinkering a bit with apache's config, but attempting > rewrite rules in the main system 000-default.conf seem to cause other > problems with things like the thruk login cgi. There seems to be too > much redirecting and linking internally to non-https URLs basically > that some links are working where others are not. I've not given up > with this approach but it's definitely behaving more finicky than I > had anticipated. > > ex> > =====[ Documented here: https://mathias-kettner.de/cms_omd_https.html > RewriteEngine On > RewriteCond %{SERVER_PORT} !^443$ > RewriteRule (.*) https://%{HTTP_HOST}/$1 [L] > > > I also attempted a quick pass at using nginx on the same host to proxy > back all calls to the http apache daemon, but it was having troubles > with passing frames through when proxying, so I found myself going > down the rabbithole of disabling frames...but then also was running > into some links not proxying correctly (the login cgi being the first > case). I've also not given up on this approach either but it as well > is being a bit more finicky that I anticipated. > > > Has anyone implemented a total https OMD setup (multisite)...or are > there docs/references that give clues as to how best to accomplish this? > Any pointers to help smooth the path would be greatly appreciated. > > Cheers, > -Chris > > > _______________________________________________ > omd-users mailing list > omd-users@lists.mathias-kettner.de > http://lists.mathias-kettner.de/mailman/listinfo/omd-users
signature.asc
Description: OpenPGP digital signature
_______________________________________________ omd-users mailing list omd-users@lists.mathias-kettner.de http://lists.mathias-kettner.de/mailman/listinfo/omd-users
