This question is in reference to Atlassian Documentation: Administering Collaborative Editing
Hello all,
if we use the default config for synchrony, the internal proxy has problems to access the localhost because confluence is running in a docker and internal proxy should prefer confluence:8091/... for localhost:8091 to access the synchrony. If we proxy the requests to synchrony via nginx and disable the internal confluence proxy, such config works as expected with the one exception: confluence generates synchrony urls with port :8091 and this port should be opened extra on a host machine. The responses from :8091/synchrony and :80/synchrony are now the same and both work well, but the web pages want to go to :8091.
We would like either to say the confluence to access synchrony via internal proxy under the specific hostname (eg. confluence:8091) or to say what port should be used to access the synchrony, if the internal proxy is disabled (in our case 80).
We use confluence 6.0.1 in Docker + Oracle JDK 8
Any hints would be appreciated!
Kind regard,
Gena
Port is configurable by adding the following line (say your preferred port is 9004) to /bin/setenv.sh
CATALINA_OPTS="-Dsynchrony.port=9004 ${CATALINA_OPTS}"
Cheers,
Zlatko
Synchrony's port can be specified with -Dreza.port (not -Dsynchrony.port - see https://jira.atlassian.com/browse/CONF-45565).
I'm not sure I follow re. confluence:8091. Synchrony binds to :8091 on all interfaces by default. Confluence (6.0.2 anyway) hardcodes 'localhost' in its 'Synchrony Internal Service URL' - see https://jira.atlassian.com/browse/CONF-45567)
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
We are on 6.0.3 in a docker now. The synchrony proxy is enabled. Following nginx configuration works (important is the location /synchrony-proxy):
location /synchrony-proxy { proxy_set_header X-Forwarded-Host $host; proxy_set_header X-Forwarded-Server $host; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass http://confluence:8091/synchrony; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "Upgrade"; } location / { proxy_set_header Host $http_host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_redirect off; proxy_pass http://confluence-backend; } }
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Sir @gbatalski
May I ask if you manage to change the port of your confluence synchrony? We have a problem on synchrony on our confluence and I already did this code to setenv.sh
CATALINA_OPTS="-Dsynchrony.port=8092 ${CATALINA_OPTS}"
but still nothing happens. Do you have any idea on this sir? Thank you!
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Neil,
we use the current 7.x version in a docker without any changes in a config files. We setup following parameter (docker compose example):
compose:
service:
confluence:
.....
environment:
- 'ATL_JDBC_URL=jdbc:postgresql://<db>'
- 'ATL_JDBC_USER=<user>'
- 'ATL_JDBC_PASSWORD=<pass>'
- 'ATL_PROXY_NAME=<you.wiki.fqdn>'
- 'ATL_DB_TYPE=postgresql'
- 'ATL_TOMCAT_SCHEME=https'
- 'ATL_PROXY_PORT=443'
- 'ATL_TOMCAT_CONTEXT_PATH=/'
- 'ATL_DB_POOLMAXSIZE=150'
- 'JVM_MAXIMUM_MEMORY=<XX>G'
- 'http_proxy=${proxy if you need}'
- 'https_proxy=${proxy if you need}'
- 'CONFLUENCE_LOG_STDOUT=true'
Nginx reverse proxy config:
server {
listen 443 ssl;
server_name <you.wiki.fqdn>;
ssl_certificate ssl.crt;
ssl_certificate_key ssl.key;
ssl_protocols TLSv1.3;
ssl_ciphers HIGH:!aNULL:!MD5;
add_header 'Access-Control-Allow-Origin' 'https://<you.wiki.fqdn>';
add_header 'Access-Control-Allow-Credentials' 'true';
add_header 'Access-Control-Allow-Headers' 'Authorization,Accept,Origin,DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range';
add_header 'Access-Control-Allow-Methods' 'GET,POST,OPTIONS,PUT,DELETE,PATCH';
location / {
resolver 127.0.0.11;
proxy_set_header Host $http_host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_redirect off;
set $upstream http://confluence:8090;
proxy_pass $upstream;
proxy_set_header X-Forwarded-Proto "https";
}
}
hope, it hepls
Regards
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Sir @[deleted]
I am a little bit confused on this instructions and codes. Sorry but I am just a Newbie on this field of IT.
Sorry to ask sir, can I contact you thru email or any other platforms for some questions? Thank you in advance sir!
Best regards,
Neil Morada
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.