Come for the products,
stay for the community

The Atlassian Community can help you and your team get more value out of Atlassian products and practices.

Atlassian Community about banner
4,366,948
Community Members
 
Community Events
168
Community Groups

Configure Crucible with nginx reverse proxy and SSL

Wrote a question and it disappeared somehow, so if this is a duplicate post, apologies.

I'm running Crucible in Docker, and have an nginx reverse proxy (https-portal) in front of it.

My nginx config is generated:

server {
listen 443 ssl http2;
server_name crucible.myserver.com;

ssl on;
ssl_certificate /var/lib/https-portal/crucible.myserver.com/production/chained.pem;
ssl_certificate_key /var/lib/https-portal/crucible.myserver.com/production/domain.key;

ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_session_cache shared:SSL:50m;
ssl_ciphers ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA;
ssl_prefer_server_ciphers on;

ssl_dhparam /var/lib/https-portal/dhparam.pem;

# Prevent Nginx from leaking the first TLS config
if ($host != $server_name) {
return 444;
}


location / {

proxy_pass http://crucible_crucible_1:8080;

proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;


}

}

 

 

My crucible config for my web-server is currently empty, which works if I access the application outside of the context of my reverse proxy (ie: if I turn it off), and use http and port 8080:

<web-server>
<http bind=":8080" />
</web-server>

However, I want to access it as https://crucible.myserver.com.

 

Thank you in advance.

 

Greg

 

1 answer

1 accepted

2 votes
Answer accepted

Go to https://crucible.example.com/admin/viewServerSettings.do

Set the following:

Proxy scheme https
Proxy host crucible.example.com
Proxy port 443
Site URL https://crucible.example.com

The config.xml would be:

<web-server site-url="https://crucible.example.com">
<http bind=":8060" proxy-host="crucible.example.com" proxy-port="443" proxy-scheme="https"/>
</web-server>

Like Joe Bennett likes this

This worked out great!  Thanks.  Strange since I think I had tried multiple combinations of the above, but I guess I never quite landed on the correct one.

Suggest an answer

Log in or Sign up to answer
TAGS

Atlassian Community Events