system service►Atlassian►confluence https

Atlassian jira confluence https

confluence SSL设置

  1. 停止服务

    1
    2
    3
    [root@confluence app]# systemctl stop confluence
    或者
    [root@confluence app]# /etc/init.d/confluence stop

  2. 修改tomcat server.conf配置文件

    1
    2
    3
    4
    5
    6
    7
    8
    [root@confluence app]# vim /mnt/app/confluence/conf/server.xml
    <Connector port="8090" connectionTimeout="20000" redirectPort="8443"
            maxThreads="48" minSpareThreads="10"
            enableLookups="false" acceptCount="10" debug="0" URIEncoding="UTF-8"
            protocol="org.apache.coyote.http11.Http11NioProtocol"
            proxyName="wiki.ops.com" proxyPort="443" scheme="https" secure="true"/>
    和
    <Context path="/confluence" docBase="../confluence" debug="0" reloadable="false" useHttpOnly="true">

  3. 启动服务

    1
    2
    3
    [root@confluence app]# systemctl start confluence
    或者
    [root@confluence app]# /etc/init.d/confluence start

  4. nginx ssl key存放位置

    1
    2
    3
    [root@nginx ~]# ls -1 /mnt/app/nginx/conf/ssl/*
    /mnt/app/nginx/conf/ssl/confluence.crt
    /mnt/app/nginx/conf/ssl/confluence.key

  5. nginx 主配置文件

    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
    14
    15
    16
    17
    18
    19
    20
    21
    22
    23
    24
    25
    26
    27
    28
    29
    30
    31
    32
    33
    34
    35
    36
    37
    38
    39
    40
    [root@nginx ~]# cat /mnt/app/nginx/conf/nginx.conf
    user nginx nginx;
    worker_processes  8;
    worker_cpu_affinity 00000001 00000010 00000100 00001000 00010000 00100000 01000000 10000000;
    worker_rlimit_nofile 102400;

    events {
      use epoll;
      worker_connections  102400;
    }

    http {
      include              mime.types;
      default_type         application/octet-stream;
      sendfile             on;
      keepalive_timeout    65;
      server_tokens        off;
      client_max_body_size 30m;
      client_header_buffer_size 16k;
      large_client_header_buffers 4 32k;

      gzip                 on;
      gzip_vary            on;
      gzip_min_length      1k;
      gzip_buffers         4  16k;
      gzip_http_version    1.0;
      gzip_comp_level      5;
      gzip_types text/plain application/x-javascript text/css application/xml  image/jpeg image/png image/gif;

      log_format  main  '$remote_addr $remote_user [$time_local] "$request" '
                          '$status $body_bytes_sent '
                          '"$http_user_agent" $http_x_forwarded_for $request_time $upstream_response_time';
      error_log /mnt/log/nginx/nginx_error.log ;

      include /mnt/app/nginx/conf/vhost/*.conf;
    }

    stream {
      include /mnt/app/nginx/conf/stream/*.conf;
    }

  6. nginx confluence 虚拟主机配置文件

    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
    14
    15
    16
    17
    18
    19
    20
    21
    22
    23
    24
    25
    26
    27
    28
    29
    30
    31
    32
    33
    34
    35
    36
    37
    38
    39
    40
    41
    42
    43
    [root@nginx ~]# cat /mnt/app/nginx/conf/vhost/wiki.conf
    server {
      listen       80;
      server_name  wiki.ops.com;

      return 301 https://$host$request_uri;
    }


    server {
      listen 443 ssl;
      server_name  wiki.ops.com;
      access_log   /mnt/log/nginx/wiki.ops.com.access.log  main;
      error_log    /mnt/log/nginx/wiki.ops.com.error.log;

      ssl on;
      ssl_certificate /mnt/app/nginx/conf/ssl/confluence.crt;
      ssl_certificate_key /mnt/app/nginx/conf/ssl/confluence.key;
      ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
      ssl_ciphers ECDHE-RSA-AES256-SHA384:AES256-SHA256:RC4:HIGH:!MD5:!aNULL:!eNULL:!NULL:!DH:!EDH:!AESGCM;
      ssl_prefer_server_ciphers on;
      ssl_session_cache shared:SSL:10m;
      ssl_session_timeout  10m;

      location / {
        rewrite ^/ https://wiki.ops.com/confluence/;
      }

      location /confluence {
        proxy_set_header        Host $host:$server_port;
        proxy_set_header        X-Real-IP $remote_addr;
        proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header        X-Forwarded-Proto $scheme;
        proxy_redirect          http:// https://;
        proxy_pass              http://10.10.10.12:8090/confluence;
        client_max_body_size    10M;
        proxy_set_header        X-Forwarded-Host $host;
        proxy_set_header        X-Forwarded-Server $host;
        # Required for new HTTP-based CLI
        proxy_http_version 1.1;
        proxy_request_buffering off;
      }
    }

  7. nginx reload

    1
    2
    [root@nginx ~]# /mnt/app/nginx/sbin/nginx -c /mnt/app/nginx/conf/nginx.conf -t
    [root@nginx ~]# /mnt/app/nginx/sbin/nginx -c /mnt/app/nginx/conf/nginx.conf -s reload

  8. 验证: 输入域名”wiki.ops.com”查看是否自动跳转为https