nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Apache Proxy for Jira and Confluence

Ghaith Haddad

Hello everyone,

So i have apache proxy SSL over jira and everything is working fine, i added confluence to the same server and now im trying to do the same thing, to have it behind apache SSL. This is my apache conf file that im using:

ServerAdmin webmaster@localhost
DocumentRoot /opt/atlassian/jira
ServerName my-servername.com

ProxyPreserveHost on
ProxyPass / http://mydomain:8080/
ProxyPassReverse / http://mydomain:8080/

SSLEngine on
SSLCertificateFile /etc/apache2/ssl/jira.crt
SSLCertificateKeyFile /etc/apache2/ssl/jira.key

ErrorLog ${APACHE_LOG_DIR}/error.log
CustomLog ${APACHE_LOG_DIR}/access.log combined

</VirtualHost>

Now what should i add/change in this file to have confluence also behind it. FYI JIRA is at port 8080 and confluence is at port 8090. confluence home folder is /opt/atlassian/confluence.

Any help or guidance is greatly appreciated, thanks in advance!

Cheers

Accepted answers

robert Mugabuhamye

hello Ghaith.
this is an example of one of our configuration it might help.

httpd.conf

LoadModule proxy_module /usr/lib/apache2/modules/mod_proxy.so

LoadModule proxy_http_module /usr/lib/apache2/modules/mod_proxy_http.so

LoadModule proxy_wstunnel_module /usr/lib/apache2/modules/mod_proxy_wstunnel.so

LoadModule rewrite_module /usr/lib/apache2/modules/mod_rewrite.so

...

Include conf/jira-virtualhost.conf

Include conf/confluence-virtualhost.conf

jira-virtualhost.conf

ServerName jira.<DOMAIN>.com

ProxyRequests Off

ProxyVia Off

Require all granted

</Proxy>

ProxyPass / http://localhost:8080/

ProxyPassReverse / http://localhost:8080/

# SSLEngine On

# SSLCertificateFile /atlassian/ssl-domain/cert.pem

# SSLCertificateKeyFile /atlassian/ssl-domain/certprivkey.pem

# SSLCertificateChainFile /atlassian/ssl-domain/chain.pem

SSLEngine On

SSLCertificateFile /atlassian/ssl-domain/SSLCertificateFile.crt

SSLCertificateKeyFile /atlassian/ssl-domain/SSLCertificateKeyFile.key

SSLCertificateChainFile /atlassian/ssl-domain/SSLCertificateChainFile.crt

</VirtualHost>

ServerName jira.<DOMAIN>.com

Redirect Permanent / https://jira.<DOMAIN>.com

</VirtualHost>

confluence-virtualhost.conf

ServerName confluence.<DOMAIN>.com

ProxyRequests Off

ProxyPreserveHost On

Require all granted

</Proxy>

ProxyPass /synchrony http://localhost:8091/synchrony

Require all granted

RewriteEngine on

RewriteCond %{HTTP:UPGRADE} ^WebSocket$ [NC]

RewriteCond %{HTTP:CONNECTION} Upgrade$ [NC]

RewriteRule .* ws://localhost:8091%{REQUEST_URI} [P]

</Location>

ProxyPass / http://localhost:8090/

ProxyPassReverse / http://localhost:8090/

SSLEngine On

SSLCertificateFile /atlassian/ssl-domain/SSLCertificateFile.crt

SSLCertificateKeyFile /atlassian/ssl-domain/SSLCertificateKeyFile.key

SSLCertificateChainFile /atlassian/ssl-domain/SSLCertificateChainFile.crt

Require all granted

</Location>

Require all granted

</Location>

</VirtualHost>

ServerName confluence.<DOMAIN>.com

Redirect Permanent / https://confluence.<DOMAIN>.com/

Redirect Permanent /synchrony https://confluence.<DOMAIN>.com/synchrony

</VirtualHost>

All comments

Gonchik Tsymzhitov

Hi!

Let's checkout this one

https://confluence.atlassian.com/doc/running-confluence-over-ssl-or-https-161203.html

https://confluence.atlassian.com/doc/using-apache-with-mod_proxy-173669.html

Ghaith Haddad

Hello @Gonchik Tsymzhitov

Thank you for the reply but i've been to these links before but they only show how to setup apache proxy for one service not 2 which is what im trying to do. Or am i not missing something there?

Gonchik Tsymzhitov

Well, you need to set first the context path for one of service.

https://confluence.atlassian.com/confkb/how-to-change-the-confluence-context-path-707985922.html

Then set in the proxy rule like

ProxyPreserveHost on
ProxyPass /wiki http://mydomain:8090/
ProxyPassReverse /wiki http://mydomain:8090/

Ghaith Haddad

ok after i set the context path for confluence should i add

ProxyPreserveHost on
ProxyPass /wiki http://mydomain:8090/
ProxyPassReverse /wiki http://mydomain:8090/

to the same apache proxy file that i have? so in a sense i would have 2 of these one for jira and one for confluence?

robert Mugabuhamye

hello Ghaith.
this is an example of one of our configuration it might help.

httpd.conf

LoadModule proxy_module /usr/lib/apache2/modules/mod_proxy.so

LoadModule proxy_http_module /usr/lib/apache2/modules/mod_proxy_http.so

LoadModule proxy_wstunnel_module /usr/lib/apache2/modules/mod_proxy_wstunnel.so

LoadModule rewrite_module /usr/lib/apache2/modules/mod_rewrite.so

...

Include conf/jira-virtualhost.conf

Include conf/confluence-virtualhost.conf

jira-virtualhost.conf

ServerName jira.<DOMAIN>.com

ProxyRequests Off

ProxyVia Off

Require all granted

</Proxy>

ProxyPass / http://localhost:8080/

ProxyPassReverse / http://localhost:8080/

# SSLEngine On

# SSLCertificateFile /atlassian/ssl-domain/cert.pem

# SSLCertificateKeyFile /atlassian/ssl-domain/certprivkey.pem

# SSLCertificateChainFile /atlassian/ssl-domain/chain.pem

SSLEngine On

SSLCertificateFile /atlassian/ssl-domain/SSLCertificateFile.crt

SSLCertificateKeyFile /atlassian/ssl-domain/SSLCertificateKeyFile.key

SSLCertificateChainFile /atlassian/ssl-domain/SSLCertificateChainFile.crt

</VirtualHost>

ServerName jira.<DOMAIN>.com

Redirect Permanent / https://jira.<DOMAIN>.com

</VirtualHost>

confluence-virtualhost.conf

ServerName confluence.<DOMAIN>.com

ProxyRequests Off

ProxyPreserveHost On

Require all granted

</Proxy>

ProxyPass /synchrony http://localhost:8091/synchrony

Require all granted

RewriteEngine on

RewriteCond %{HTTP:UPGRADE} ^WebSocket$ [NC]

RewriteCond %{HTTP:CONNECTION} Upgrade$ [NC]

RewriteRule .* ws://localhost:8091%{REQUEST_URI} [P]

</Location>

ProxyPass / http://localhost:8090/

ProxyPassReverse / http://localhost:8090/

SSLEngine On

SSLCertificateFile /atlassian/ssl-domain/SSLCertificateFile.crt

SSLCertificateKeyFile /atlassian/ssl-domain/SSLCertificateKeyFile.key

SSLCertificateChainFile /atlassian/ssl-domain/SSLCertificateChainFile.crt

Require all granted

</Location>

Require all granted

</Location>

</VirtualHost>

ServerName confluence.<DOMAIN>.com

Redirect Permanent / https://confluence.<DOMAIN>.com/

Redirect Permanent /synchrony https://confluence.<DOMAIN>.com/synchrony

</VirtualHost>

Ghaith Haddad

Thank you @robert Mugabuhamye i will give that a try.

Cheers!

Ghaith Haddad

quick question just to make sure. i should also change the base URL for both applications right?

robert Mugabuhamye

sorry forgot to share that>

this is the examples of the server.xml

Jira:

<Connector port="8080"

maxThreads="150"

minSpareThreads="25"

connectionTimeout="20000"

enableLookups="false"

maxHttpHeaderSize="8192"

protocol="HTTP/1.1"

useBodyEncodingForURI="true"

redirectPort="8443"

acceptCount="100"

disableUploadTimeout="true"

proxyName="jira.<DOMAIN>.com"

proxyPort="443"

secure="true"

scheme="https"

bindOnInit="false"/>

...

Confluence

<Connector port="8090"

connectionTimeout="20000"

redirectPort="8443"

maxThreads="48"

minSpareThreads="10"

enableLookups="false"

acceptCount="10"

debug="0"

URIEncoding="UTF-8"

protocol="org.apache.coyote.http11.Http11NioProtocol"

proxyName="confluence.<DOMAIN>.com"

proxyPort="443"

secure="true"

scheme="https"/>

...

...

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

confluence

jira

apache

proxy

ssl

reverse-proxy