How to configure Stash http connector with SSL terminated at load balancer

[Jefferson Ackor]

Migrating to Stash DC and terminating SSL at the load balancer, but I not sure how to configure server.xml which redirects to 8443 by default.

[Jeff Thomas · Accepted solution]

Our Proxying and securing Stash guide has more information for what changes need to be made. I've provided a sample server.xml that should accomplish this. You'll be adding the secure, scheme, proxyName, and proxyPort parameters.

<Connector port="7990"
     protocol="HTTP/1.1"
     connectionTimeout="20000"
     useBodyEncodingForURI="true"
     redirectPort="443"
     compression="on"
    compressableMimeType="text/html,text/xml,text/plain,text/css,application/json,application/javascript,application/x-javascript"
     secure="true"
     scheme="https"
     proxyName="stash.company.com"
     proxyPort="443" />

[Jefferson Ackor]

Thanks, Jeff. I've added these values and I'm getting connection reset errors. We're terminating SSL Using BigIP, which I'd expect to be configured similarly to HAProxy. Looks like I may need to set the context path to /stash.