Forums

Articles
Create
cancel
Showing results for 
Search instead for 
Did you mean: 

jira + nginx - can't login via https

Alexander
Contributor
April 1, 2022

I'm trying to setup jira server via nginx proxy.
made a A dns record for it, made an port forwarding to NGINX (with certbot installed),
at nginx i got this jira.blabla.com.conf config

server {
server_name jira.blabla.com;

location / {
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-Server $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_pass http://172.16.1.19:8080;
}

listen 443 ssl; # managed by Certbot
ssl_certificate /etc/letsencrypt/live/jira.blabla.com/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/jira.blabla.com/privkey.pem; # managed by Certbot
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
}

server {
listen 80;
server_name jira.blabla.com;
return 301 https://$server_name$request_uri;

/opt/atlassian/jira/conf/server.xml

<Connector port="8080" relaxedPathChars="[]|" relaxedQueryChars="[]|{}^\`"<>"
maxThreads="150" minSpareThreads="25" connectionTimeout="20000" enableLookups="false"
maxHttpHeaderSize="8192" protocol="HTTP/1.1" useBodyEncodingForURI="true" redirectPort="8443"
acceptCount="100" disableUploadTimeout="true" bindOnInit="false" secure="true" scheme="https"
proxyName="jira.blabla.com" proxyPort="443"/>

old one is commented

<!--
<Connector port="8080" relaxedPathChars="[]|" relaxedQueryChars="[]|{}^\`"<>"
maxThreads="150" minSpareThreads="25" connectionTimeout="20000" enableLookups="false"
maxHttpHeaderSize="8192" protocol="HTTP/1.1" useBodyEncodingForURI="true" redirectPort="8443"
acceptCount="100" disableUploadTimeout="true" bindOnInit="false"/>
-->

i opening https://jira.blabla.com
and i can't login with no error
with the sane credentials i can login at http://jira.blabla.lan:8080/

1 answer

0 votes
Artur Moura
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
April 2, 2022

Hi @Alexander

Thanks for your question!

Both of your Jira and NGINX configurations look good, however, I would recommend you to check the <JIRA_HOME>/atlassian-jira-security.log file to try to have more information about the failed login.

In addition to that, if you have enabled SSO in your Jira instance, the redirect URL should be changed to the new Jira BaseURL as well on your SSO solution.

Hope this helps, please let us know how it goes.

Alexander
Contributor
April 4, 2022

 

"SSO in your Jira instance" ? Is there any SSO setting in jira ?

 

Anyway i started from the scratch. And now from time to time i gor 504 error in my jira webpage. What could be the reason ?

Thanks

Suggest an answer

Log in or Sign up to answer