Attachment 40101 Details for Bug 13799 – Bug 13799 - Nginx reverse proxy config baseline for Koha REST API. Tweaking needed to work with makefile.

[patch] Bug 13799 - Nginx reverse proxy config baseline for Koha REST API. Tweaking needed to work with makefile.

Bug-13799---Nginx-reverse-proxy-config-baseline-fo.patch (text/plain), 3.31 KB, created by Olli-Antti Kivilahti on 2015-06-12 10:11:37 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Olli-Antti Kivilahti

Created: 2015-06-12 10:11:37 UTC

Size: 3.31 KB

patch

obsolete

>From 1200c1a7da2537b22ed2ad83a0bd23a1cfe028e9 Mon Sep 17 00:00:00 2001
>From: Olli-Antti Kivilahti <olli-antti.kivilahti@jns.fi>
>Date: Thu, 11 Jun 2015 17:43:52 +0300
>Subject: [PATCH] Bug 13799 - Nginx reverse proxy config baseline for Koha
> REST API. Tweaking needed to work with makefile.
>MIME-Version: 1.0
>Content-Type: text/plain; charset=UTF-8
>Content-Transfer-Encoding: 8bit
>
>Uses a self-signed SSL-certificate to service at port 444 by default.
>Reverse proxies to 127.0.0.1:8080 (expecting hypnotoad to be listening)
>
>Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤
>Â¤Â¤ Koha API Nginx configuration Â¤Â¤
>Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤Â¤
>
>Deploy the Nginx configuration
>------------------------------
>
>Run make to populate the koha-nginx-kohaapi.conf
>
>link to the /etc/nginx/sites-available/ -directory
>..$ ln -s /home/koha/koha-dev/etc/koha-nginx-kohaapi.conf /etc/nginx/sites-available/kohaapi
>and enable with command
>..$ ln -s /etc/nginx/sites-available/kohaapi /etc/nginx/sites-enabled/kohaapi
>
>Disable the default config
>..$ rm /etc/nginx/sites-enabled/default
>
>Create a openssl self-signed certificate or use your own.
>---------------------------------------------------------
>
>..$ cd /etc/nginx
>..$ mkdir ssl
>..$ chmod 400 ssl
>..$ cd ssl
>..$ openssl req -x509 -sha256 -newkey rsa:2048 -keyout key.pem.secure -out cert.pem -days 720
>..$ openssl rsa -in key.pem.secure -out key.pem
>..$ chmod 400 *
>
>Restart nginx
>..$ service nginx restart
>---
> etc/koha-nginx-kohaapi.conf |   52 +++++++++++++++++++++++++++++++++++++++++++
> 1 file changed, 52 insertions(+)
> create mode 100644 etc/koha-nginx-kohaapi.conf
>
>diff --git a/etc/koha-nginx-kohaapi.conf b/etc/koha-nginx-kohaapi.conf
>new file mode 100644
>index 0000000..8c06989
>--- /dev/null
>+++ b/etc/koha-nginx-kohaapi.conf
>@@ -0,0 +1,52 @@
>+upstream hypnotoad {
>+    server 127.0.0.1:8080;
>+}
>+
>+server {
>+    listen 444;                          ## listen for ipv4
>+    listen [::]:444 default ipv6only=on; ## listen for ipv6
>+    proxy_connect_timeout 120s; #High value because some API requests (show all borrowers) take a LOT of time.
>+    proxy_read_timeout 120s;
>+    proxy_send_timeout 120s;
>+
>+    #server_name <your_Koha_DNS_Name>;
>+    access_log /home/koha/koha-dev/var/log/kohaapi.access.log;
>+    error_log  /home/koha/koha-dev/var/log/kohaapi.error.log error;
>+
>+    root /home/koha/kohaclone/api/;
>+    index index.html;
>+
>+    ssl on;
>+    ssl_certificate     ssl/cert.pem;
>+    ssl_certificate_key ssl/key.pem;
>+
>+    ssl_session_timeout 5m;
>+
>+    ssl_protocols SSLv3 TLSv1;
>+    ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv3:+EXP;
>+    ssl_prefer_server_ciphers on;
>+
>+    #Redirect root to the Swagger documentation
>+    location = / {
>+        try_files $uri /v1/doc/;
>+    }
>+    #Don't proxy doc
>+    location ^~ /v1/doc/ {
>+        
>+    }
>+    # and no proxying the swagger.json
>+    location = /v1/swagger.json {
>+        
>+    }
>+
>+    #Proxy everything else
>+    location /v1/ {
>+        proxy_pass http://hypnotoad;
>+        proxy_http_version 1.1;
>+        proxy_set_header Upgrade $http_upgrade;
>+        proxy_set_header Connection "upgrade";
>+        proxy_set_header Host $host;
>+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
>+        proxy_set_header X-Forwarded-Proto $scheme;
>+    }
>+}
>-- 
>1.7.9.5

Actions: View | Diff | Splinter Review

Attachments on bug 13799: 36700 | 36705 | 36938 | 36941 | 37119 | 37132 | 37172 | 38246 | 39156 | 39158 | 39159 | 39160 | 39161 | 39162 | 39163 | 39164 | 40088 | 40092 | 40093 | 40094 | 40098 | 40099 | 40101 | 40140 | 40141 | 40142 | 40463 | 40464 | 40465 | 40466 | 40467 | 40468 | 40469 | 40470 | 40471 | 40551 | 40552 | 40553 | 40554 | 40560 | 40561 | 40584 | 40585 | 40586 | 40587 | 40616 | 40617 | 40618 | 40619 | 41160 | 41161 | 41162 | 41268 | 41269 | 41270 | 41271 | 41272 | 41273 | 41274 | 41320 | 41321 | 41326 | 41327 | 41328 | 41329 | 41330 | 41331 | 41538 | 41539 | 41540 | 41541 | 41542 | 41543 | 41547 | 41554 | 42044 | 42085 | 42086 | 42123 | 42518 | 42766 | 42768 | 42801 | 42874 | 42875 | 42876 | 42877 | 42878 | 43186 | 43187 | 43189 | 43190 | 43191 | 43192 | 43204 | 43205 | 43206 | 43207 | 43208 | 43209 | 43210 | 43211 | 43212 | 43213 | 43214 | 43980 | 43981 | 43987 | 43989 | 43990 | 43991 | 43992 | 43993 | 43994 | 43995 | 43996 | 43997 | 43998 | 43999 | 44000 | 44001 | 44185 | 44285 | 44313 | 44375 | 44376 | 44377 | 44378 | 44379 | 44380 | 44381 | 44382 | 44383 | 44384 | 44385