[jira] [Created] (NIFI-9484) SECURE NIFI behind Nginx Reverse proxy

["mayki (Jira)" <ji...@apache.org>]

mayki created NIFI-9484:
---------------------------

             Summary: SECURE NIFI behind Nginx Reverse proxy
                 Key: NIFI-9484
                 URL: https://issues.apache.org/jira/browse/NIFI-9484
             Project: Apache NiFi
          Issue Type: Bug
          Components: Core Framework
    Affects Versions: 1.11.4
            Reporter: mayki


Hello,

I read a lot of documentation about how configure secure nifi before reverse proxy.

But it seems missing something to work completly.
 * the path to /nifi, WEB UI,  processor configuration: OK
 * the path to /nifi-api, stop processor, view provenance, [https://xxxx:19091/nifi-api/processors/28621407-017d-1000-31a3-58539fc2e94a/run-status|https://s3639tos.mc2.renault.fr:19091/nifi-api/processors/28621407-017d-1000-31a3-58539fc2e94a/run-status] : KO

 

I use this config :
{code:java}
server {
      listen    19091;
      server_name    nginx_server;
      proxy_ssl_trusted_certificate /etc/nginx/certs/xxx-cert.pem;
      proxy_ssl_certificate /etc/nginx/certs/xxx-cert.pem;
      proxy_ssl_certificate_key /etc/nginx/certs/xxx-key.pem;
    location / {
        proxy_ssl_server_name on;

        proxy_pass https://nifi_server:9091;
        proxy_set_header X-ProxyScheme https;
        proxy_set_header X-ProxyHost nifi_server;
        proxy_set_header X-ProxyPort 19091;
        #proxy_set_header X-ProxyContextPath /;
        proxy_set_header X-ProxiedEntitiesChain $ssl_client_s_dn;
 {code}
Nifi properties 1: 
{code:java}
nifi.web.proxy.context.path=
nifi.web.proxy.host=nginx_server:19091 {code}
Nifi properties 2: 
{code:java}
nifi.web.proxy.context.path=/
nifi.web.proxy.host=nginx_server:19091 {code}
 

Nifi properties 3: 
{code:java}
nifi.web.proxy.context.path=//,/nifi-api
nifi.web.proxy.host=nginx_server:19091 {code}
 

I read a lot time, but I don't sure that is need to push in nifi.web.proxy.context.path

What is the correct configuration to setup ?

Thanks.



--
This message was sent by Atlassian Jira
(v8.20.1#820001)