HA Proxy config to support Application Links

[Richard Cross]

I'm trying to get Application Links working from Confluence and Bitbucket to a Jira Data Center server that sits behind HA Proxy.

They seem to set up ok and look fine from the Jira server, but on the Confluence and Bitbucket side, I get a "Network Error".

I raised a ticket with Atlassian Premier Support, but unfortunately they don't support HA Proxy, and the official documentation recommends Apache.

Here's my current config:

backend jira
  balance roundrobin 
  cookie JSESSIONID prefix nocache server jira-01 
  jira-01.gcp.cloud.uk:8080 check cookie jira-01 
  jira-02.gcp.cloud.uk:8080 check cookie jira-02 
  option httpchk GET /status 
  http-check expect string RUNNING

Atlassian mentioned that the problem might be something to do with proxypass/proxypassreverse... but I'm not sure how that translates to HA Proxy 2.x.

Can anyone who's managed to get this working with HA Proxy tell me what's missing from the above?

[Tomasz Towianski]

I think your problem may be related to the SSL cert, which was in my case.
HA Proxy needs to have CA for domain in fullchain .pem *with an intermediate CA*.

---KEY FILE--
--CRT Server Cert--
--INTERMEDIATE CA--
--ROOT CA--