nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

How to make Confluence available via Apache

AKASH BHARDWAJ2

Hi All,

I am using confluence 5.2.5 on Linux machine. I have installed confluence but when i try to view through browser using port 8090. it is not working as we have firewall blocked that port. Now i would like to connect Confluence via 80 port.

Can any one please provide me steps to connect Confluence via apache. what all enties i am supposed to make.

Thank you,

Accepted answers

Alexander Penev _ByteSource_

Here a detailed description about setting up Apache with SSL (HTTPS)

Configuration

Client Browser -> HTTPS/SSL -> Apache Proxy -> AJP -> Tomcat (JIRA)

In this HowTo we configure apache to run as a proxy. The client has a secure connection with the Apache proxy and then through AJP protocol it communicates with Tomcat(e.g. Jira, Confluence, etc.)

Install Apache Web Server

Install Apache HTTP Server with yum

[root@localhost ~]# yum install httpd

Set the httpd service to start on boot:

[root@localhost ~]# chkconfig --levels 235 httpd on

IF YOU WANT TO TEST HTTPD enable the name-based virtual hosting on port 80

Open the httpd configuration file located at /etc/httpd/conf/httpd.conf
Un-comment the line containing the text NameVirtualHost *:80
Save the file
Restart the Apache HTTP Server daemon with command "service httpd restart"
Note: Ignore the "NameVirtualHost *:80 has no VirtualHosts" warning for now.
Visit localhost in your web browser. You should see an Apache Test Page.

Install mod_SSL (JIRA configuration later along with JIRA installation)

Install mod_ssl with yum

[root@localhost ~]# yum install mod_ssl

Connecting Apache with JIRA Tomcat using AJP.

First the AJP connector must be enabled in JIRA Tomcat. Go to <JIRA_INSTALL>/conf/server.xml. Uncomment the connector which uses the AJP protocol. Should be like this:

<Connector port="8009" address="127.0.0.1" redirectPort="8443" enableLookups="false" protocol="AJP/1.3" URIEncoding="UTF-8"/>

Make sure sure u also add address="127.0.0.1" to the connector. This way tomcat connector will accept requests only from localhost

Configure Apache with SSL

Now we need to create the Virtual Host in our Apache server, which serves as a proxy, that will handle the https requests. Remove the default ssl.conf and create a *.conf file under /etc/httpd/conf.d and insert:

# Redirect all traffic from port 80 to 443 for security reasons

NameVirtualHost *:80

<VirtualHost *:80>

   ServerName "example.yourdomain.com"

   Redirect permanent / https://example.yourdomain.com/

</VirtualHost>

LoadModule ssl_module modules/mod_ssl.so

Listen 443

 

NameVirtualHost "Server_IP":443

 

<VirtualHost "Server_IP":443>

ServerName example.yourdomain.com

ProxyPass / ajp://localhost:8009/

ProxyPassReverse / ajp://localhost:8009/

CustomLog /var/log/httpd/jira_ssl_fullaccess.log combined

ErrorLog /var/log/httpd/jira_ssl_error.log

 

SSLEngine on

 

SSLProtocol all -SSLv2

 

SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW

 

SSLCertificateFile /etc/pki/tls/certs/localhost.crt

#SSLCertificateChainFile /etc/pki/tls/certs/server-chain.crt

SSLCACertificateFile /etc/pki/tls/certs/ca-bundle.crt

SSLCertificateKeyFile /etc/pki/tls/private/localhost.key

 

</VirtualHost>

Make sure to change the SERVER_IP to the IP of the virtual machine that JIRA is being installed. Also change the ServerName to the appropriate value.

After all the changes restart the httpd service!

All comments

Tim

There already is plenty of documentation to start with:

Nic Brough -Adaptavist-

This is a result of the question you asked before, where there is more information https://answers.atlassian.com/questions/9880654

AKASH BHARDWAJ2

@Nic Brough [Adaptavist] Hi Nic, Thank you !!

Aleš Laňar1

Edit a config file in confluence-app/conf/server.xml. There is connector and change this port. In apache config (httpd.conf) set to listening to port 80.

AKASH BHARDWAJ2

@TtheB : i have followed above links and made changes over /etc/httpd/conf/httpd.conf file. But i am still not able to make my site up. Can you please provide me with more concrete steps or documentation that i should follow to over come this issue. THank You, Akash

Aleš Laňar1

It looks like that you have a bad httpd.. There you have: Listen 80 (or the port number where you listen) ServerName your.domain.com (if you havent virtualhost) DocumentRoot locationForYourApp This is main, but there are many important settings. For more try some tutorial like this: http://httpd.apache.org/docs/2.0/misc/tutorials.html And finally check if your service is running On which OS you are running?

Alexander Penev _ByteSource_

Here a detailed description about setting up Apache with SSL (HTTPS)

Configuration

Client Browser -> HTTPS/SSL -> Apache Proxy -> AJP -> Tomcat (JIRA)

In this HowTo we configure apache to run as a proxy. The client has a secure connection with the Apache proxy and then through AJP protocol it communicates with Tomcat(e.g. Jira, Confluence, etc.)

Install Apache Web Server

Install Apache HTTP Server with yum

[root@localhost ~]# yum install httpd

Set the httpd service to start on boot:

[root@localhost ~]# chkconfig --levels 235 httpd on

IF YOU WANT TO TEST HTTPD enable the name-based virtual hosting on port 80

Open the httpd configuration file located at /etc/httpd/conf/httpd.conf
Un-comment the line containing the text NameVirtualHost *:80
Save the file
Restart the Apache HTTP Server daemon with command "service httpd restart"
Note: Ignore the "NameVirtualHost *:80 has no VirtualHosts" warning for now.
Visit localhost in your web browser. You should see an Apache Test Page.

Install mod_SSL (JIRA configuration later along with JIRA installation)

Install mod_ssl with yum

[root@localhost ~]# yum install mod_ssl

Connecting Apache with JIRA Tomcat using AJP.

First the AJP connector must be enabled in JIRA Tomcat. Go to <JIRA_INSTALL>/conf/server.xml. Uncomment the connector which uses the AJP protocol. Should be like this:

<Connector port="8009" address="127.0.0.1" redirectPort="8443" enableLookups="false" protocol="AJP/1.3" URIEncoding="UTF-8"/>

Make sure sure u also add address="127.0.0.1" to the connector. This way tomcat connector will accept requests only from localhost

Configure Apache with SSL

# Redirect all traffic from port 80 to 443 for security reasons

NameVirtualHost *:80

<VirtualHost *:80>

   ServerName "example.yourdomain.com"

   Redirect permanent / https://example.yourdomain.com/

</VirtualHost>

LoadModule ssl_module modules/mod_ssl.so

Listen 443

 

NameVirtualHost "Server_IP":443

 

<VirtualHost "Server_IP":443>

ServerName example.yourdomain.com

ProxyPass / ajp://localhost:8009/

ProxyPassReverse / ajp://localhost:8009/

CustomLog /var/log/httpd/jira_ssl_fullaccess.log combined

ErrorLog /var/log/httpd/jira_ssl_error.log

 

SSLEngine on

 

SSLProtocol all -SSLv2

 

SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW

 

SSLCertificateFile /etc/pki/tls/certs/localhost.crt

#SSLCertificateChainFile /etc/pki/tls/certs/server-chain.crt

SSLCACertificateFile /etc/pki/tls/certs/ca-bundle.crt

SSLCertificateKeyFile /etc/pki/tls/private/localhost.key

 

</VirtualHost>

Make sure to change the SERVER_IP to the IP of the virtual machine that JIRA is being installed. Also change the ServerName to the appropriate value.

After all the changes restart the httpd service!

AKASH BHARDWAJ2

Hi @Alexander Penev [ByteSource] I have tried using above Steps but still problem exist. I went through Confluence Logs but it shows server startup in 600 ms. I guess there is config problem between Apache and Confluence web server. Can you please let me know where should i look at and troubleshoot.

Nic Brough -Adaptavist-

You have already shown that Confluence is running, so the problem is with Apache. You should therefore read the Apache logs to find out what it is doing. It is quite difficult for us to help you when you don't tell us what you are doing differently from the standard documentation or what you've been shown. "I tried using above steps but still problem exist" means either that you have broken something else or you have not followed the instructions, but you have not told us what.

AKASH BHARDWAJ2

@Nic Brough [Adaptavist] @Alexander Penev [ByteSource] : It’s just a config problem between Apache and Confluence web server. Please let me know which all log files would you like to have i can provide with. Thank You, Akash

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

confluence

confluence-administration