[jira] [Resolved] (NIFI-9484) SECURE NIFI behind Nginx Reverse proxy

["David Handermann (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/NIFI-9484?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

David Handermann resolved NIFI-9484.
------------------------------------
    Resolution: Information Provided

[~mayki] Feel free to follow up if you are seeing particular errors related to the proxy configuration described.

> SECURE NIFI behind Nginx Reverse proxy
> --------------------------------------
>
>                 Key: NIFI-9484
>                 URL: https://issues.apache.org/jira/browse/NIFI-9484
>             Project: Apache NiFi
>          Issue Type: Bug
>          Components: Core Framework
>    Affects Versions: 1.11.4
>            Reporter: mayki
>            Priority: Minor
>              Labels: context-path, proxy
>
> Hello,
> I read a lot of documentation about how configure secure nifi before reverse proxy.
> But it seems missing something to work completly.
>  * the path to /nifi, WEB UI,  processor configuration: OK
>  * the path to /nifi-api, stop processor, view provenance, [https://xxxx:19091/nifi-api/processors/28621407-017d-1000-31a3-58539fc2e94a/run-status|https://s3639tos.mc2.renault.fr:19091/nifi-api/processors/28621407-017d-1000-31a3-58539fc2e94a/run-status] : KO
>  
> I use this config :
> {code:java}
> server {
>       listen    19091;
>       server_name    nginx_server;
>       proxy_ssl_trusted_certificate /etc/nginx/certs/xxx-cert.pem;
>       proxy_ssl_certificate /etc/nginx/certs/xxx-cert.pem;
>       proxy_ssl_certificate_key /etc/nginx/certs/xxx-key.pem;
>     location / {
>         proxy_ssl_server_name on;
>         proxy_pass https://nifi_server:9091;
>         proxy_set_header X-ProxyScheme https;
>         proxy_set_header X-ProxyHost nifi_server;
>         proxy_set_header X-ProxyPort 19091;
>         #proxy_set_header X-ProxyContextPath /;
>         proxy_set_header X-ProxiedEntitiesChain $ssl_client_s_dn;
>  {code}
> Nifi properties 1: 
> {code:java}
> nifi.web.proxy.context.path=
> nifi.web.proxy.host=nginx_server:19091 {code}
> Nifi properties 2: 
> {code:java}
> nifi.web.proxy.context.path=/
> nifi.web.proxy.host=nginx_server:19091 {code}
>  
> Nifi properties 3: 
> {code:java}
> nifi.web.proxy.context.path=//,/nifi-api
> nifi.web.proxy.host=nginx_server:19091 {code}
>  
> I read a lot time, but I don't sure that is need to push in nifi.web.proxy.context.path
> What is the correct configuration to setup ?
> Thanks.



--
This message was sent by Atlassian Jira
(v8.20.1#820001)