之前写过一篇基于http协议反向代理的Confluence文章：https://blog.whsir.com/post-5872.html
最近收到一些留言，询问https协议该如何配置，其实https和http配置方法没有太大变化，本文使用Nginx基于https协议配置反向代理，已基于Confluence7.4版本进行验证，理论适用于所有版本，其他版本请自行验证！
编辑Confluence的Tomcat配置文件
|
1 |
vim /opt/atlassian/confluence/conf/server.xml |
找到以下字段
|
1 2 3 4 |
<Connector port="8090" connectionTimeout="20000" redirectPort="8443" maxThreads="48" minSpareThreads="10" enableLookups="false" acceptCount="10" debug="0" URIEncoding="UTF-8" protocol="org.apache.coyote.http11.Http11NioProtocol"/> |
更改成你要反向代理的域名，注意结尾的/>
|
1 2 3 4 5 |
<Connector port="8090" connectionTimeout="20000" redirectPort="8443" maxThreads="48" minSpareThreads="10" enableLookups="false" acceptCount="10" debug="0" URIEncoding="UTF-8" protocol="org.apache.coyote.http11.Http11NioProtocol" scheme="https" secure="true" proxyName="wiki.whsir.com" proxyPort="443"/> |
保存退出，重启服务
|
1 |
/etc/init.d/confluence restart |
安装配置nginx反向代理
|
1 |
rpm -ivh https://mirrors.wlnmp.com/centos/wlnmp-release-centos.noarch.rpm |
|
1 |
vim /usr/local/nginx/conf/vhost/demo.conf |
将原有内容删除，改成以下内容（wiki.whsir.com自己更改），SSL证书请自行申请
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 |
server { listen wiki.whsir.com:80; server_name wiki.whsir.com; listen 443 default ssl; ssl_certificate /usr/local/etc/nginx/ssl/nginx.pem; ssl_certificate_key /usr/local/etc/nginx/ssl/nginx.key; ssl_session_timeout 5m; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers 'ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS'; ssl_prefer_server_ciphers on; location / { client_max_body_size 100m; proxy_set_header X-Forwarded-Host $host; proxy_set_header X-Forwarded-Server $host; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass http://localhost:8090; } location /synchrony { client_max_body_size 100m; proxy_set_header X-Forwarded-Host $host; proxy_set_header X-Forwarded-Server $host; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass http://localhost:8091/synchrony; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "Upgrade"; } } |
保存退出，重启Nginx
|
1 2 |
nginx -t /etc/init.d/nginx restart |
登录ConfluenceWEB，设置基本URL
在一般配置→站点配置→修改服务器主页URL地址，保存
原文链接：使用Nginx通过https协议反向代理Confluence，转载请注明来源！
