How to setup Jira with a proxy and use ssl between the proxy and jira and only listen on localhost?

[dmitri]

We encountered this issue: https://confluence.atlassian.com/jirakb/how-to-fix-gadget-titles-showing-as-__msg_gadget-813697086.html 

We have an nginx proxy used for authentication. We want communication between the proxy and JIRA to be via SSL.

We were able to make this work with JIRA listening on all interfaces, but it would be cleaner to listen just on localhost.

Has anyone made a setup with:

• A proxy
• SSL to the upstream JIRA
• Listen only on localhost

[dmitri · Accepted solution]

We realized we misunderstood what was happening here. JIRA is requesting via the proxy which is doing authentication via Kerberos. The gadget self-requests are not authenticating. I've re-posed the question here: https://answers.atlassian.com/questions/44605456

[Nic Brough -Adaptavist-]

Yes.  But you can only do it when the proxy web server is running on the same machine as JIRA.  Your "listen only on localhost" forces that.

[dmitri]

we do that but are having trouble getting the certs right. to be specific the proxy is nginx if anyone has a working setup to share.