Confluence behind the nginx with SSL

Frankie March 22, 2014

I'd like to install confluence behind the nginx with ssl support, so my scheme is:

user -> nginx (https) -> tomcat (http)

Could you please show me correct nginx and tomcat configs for this purpose.

Thanks.

4 answers

1 vote
Fabio Racobaldo _Herzum_
Community Leader
Community Leader
Community Leaders are connectors, ambassadors, and mentors. On the online community, they serve as thought leaders, product experts, and moderators.
March 22, 2014

Hi Frankie,

in order to do that you need to perform the following operation :

- Set Confluence context path

Edit the following file <CONFLUENCE_INST_FOLDER>/conf/server.xml, locate "Context" and add the context path (eg ... path="/confluence" ...)

- Set the proxy to the Connector

Edit the following file <CONFLUENCE_INST_FOLDER>/conf/server.xml, and add your proxy

<Connector port="8090" maxHttpHeaderSize="8192"
maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
enableLookups="false" redirectPort="8443" acceptCount="100"
connectionTimeout="20000" disableUploadTimeout="true"
proxyName="www.example.com" proxyPort="80" />
- Setup you NGNIX
Set the following :
server {
ssl on;
ssl_certificate /path/to/self-ssl.crt;
ssl_certificate_key /path/to/self-ssl.key;
server_name theos.in;
location / {
....
...
}
}

- Update Confluence URL accordingly
Confluence Administration -> General Configuration

Frankie March 22, 2014
<Connector port="8090" maxHttpHeaderSize="8192"
maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
enableLookups="false" redirectPort="8443" acceptCount="100"
connectionTimeout="20000" disableUploadTimeout="true"
proxyName="www.example.com" proxyPort="80" />
Is it correct ? Because nginx (https) maybe proxyPort="443" and what about scheme param, or i have some misunderstanding you.

Also, i have the same bug as in https://jira.atlassian.com/browse/CONF-28564, does it related to correct tomcat/nginx configuration ?

Fabio Racobaldo _Herzum_
Community Leader
Community Leader
Community Leaders are connectors, ambassadors, and mentors. On the online community, they serve as thought leaders, product experts, and moderators.
March 22, 2014

proxy name and proxy port should be setup based on your nginx configuration.

proxyName=""www.example.com" proxyPort="443"

where www.example.comis the URL configured in your NGINX

Fabio Racobaldo _Herzum_
Community Leader
Community Leader
Community Leaders are connectors, ambassadors, and mentors. On the online community, they serve as thought leaders, product experts, and moderators.
March 22, 2014

Remember that after updating server.xml you need to restart confluence

0 votes
Kenric February 4, 2015

Has anyone gotten this to work?

thanks

David Di Blasio
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
February 23, 2015

Hi Kenric, I have Nginx set up in front of one of my Confluence instances to terminate SSL and it's working beautifully. Do you have any specific questions regarding setting it up?

0 votes
Karl Bateman September 4, 2014

Hi @Fabio,

I have followed your instructions, but I recieve a 400 Error from NGINX stating that "The plain HTTP request was sent to HTTPS port".

Do you have any ideas?
Regards,
Karl
Marcel Mayer January 31, 2016

I am running in the same issue. Did you solved the problem?

0 votes
Fabio Racobaldo _Herzum_
Community Leader
Community Leader
Community Leaders are connectors, ambassadors, and mentors. On the online community, they serve as thought leaders, product experts, and moderators.
March 22, 2014

Remember that after updating server.xml you need to restart confluence

Suggest an answer

Log in or Sign up to answer
TAGS
AUG Leaders

Atlassian Community Events