Link Jira Confluence HTTPS PRoxy NGINX

[Xavier Ramon Vilamú]

Hello,
I used to have Jira with an HTTPS proxy and Confluence with HTTP. I have updated both services to the latest version and changed the proxy for a nginx in HTTPS. I had a problem with certificates but they are now fixed. The problem I'm having now is linking Jira and Confluence. The main directory is in the Jira and Confluence consult Jira. I have the following errors:
- Users do not connect: If I connect Jira and Confluence, through the HTTPS proxy. I have visibility between applications but users do not communicate because the connection messages are in HTTP. Proxy redirect HTTP to HTTPS.
- Applications do not connect: If I connect applications without the proxy, users can connect but the application sends HTTPS messages but does not respond. Jira and Conflunce only accept HTTP.

How do I configure Jira and Confluence to communicate correctly?

Thanks

[JP _AC Bielefeld Leader_]

Hi,

did you try to delete the application links on both sides (Confluence, Jira) and then set them up again? Did you get any error messages doing that?

Best

JP

[Xavier Ramon Vilamú]

Yes, I tried to establish communication Jira to Confluence and Confluence to Jira. But I have the same problem. I think the problem is that part of the communication is done with http and the other with https between Jira and Confluence. I need to define communication between applications use only HTTP or only HTTPS.

Thanks,

[JP _AC Bielefeld Leader_]

Hi,

as you're using a reverse proxy you can force a protocol change from http to https for both applications to make sure that the communication is always secured.

Some of our rules & conditions for access via port 80:

RewriteCond %{REQUEST_URI} !^/error/.* [NC]
RewriteCond %{REQUEST_URI} !^/confluence
RewriteRule ^(.*)$ https://OURSERVER/confluence/$1 [R=301,L]

You will need a similar setting for Jira.

You must ensure that users can only login using https.

Next step: Application link:

Our settings on the Jira server:

 

Settings on Confluence server:

 

For the user management, did you follow:

https://confluence.atlassian.com/doc/connecting-to-crowd-or-jira-for-user-management-229838465.html

Best

JP

[Xavier Ramon Vilamú]

Hi, 

Your rules and conditions is for Apache Proxy. Do you have the same rules to NGINX Proxy?

Thanks,

[JP _AC Bielefeld Leader_]

No

[Xavier Ramon Vilamú]

Hi, 

Finally, I create one iptable rule in each server to force HTTPS go to proxy.

• Confluence server: sudo iptables -t nat -A OUTPUT -p tcp --dport 443 -j DNAT -d [IP-confluence] --to-destination [IP-Proxy]:443
• Jira server: sudo iptables -t nat -A OUTPUT -p tcp --dport 443 -j DNAT -d [IP-jira] --to-destination [IP-Proxy]:443