[
https://issues.apache.org/jira/browse/NIFI-9484?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
David Handermann resolved NIFI-9484.
------------------------------------
Resolution: Information Provided
[~mayki] Feel free to follow up if you are seeing particular errors related to
the proxy configuration described.
> SECURE NIFI behind Nginx Reverse proxy
> --------------------------------------
>
> Key: NIFI-9484
> URL: https://issues.apache.org/jira/browse/NIFI-9484
> Project: Apache NiFi
> Issue Type: Bug
> Components: Core Framework
> Affects Versions: 1.11.4
> Reporter: mayki
> Priority: Minor
> Labels: context-path, proxy
>
> Hello,
> I read a lot of documentation about how configure secure nifi before reverse
> proxy.
> But it seems missing something to work completly.
> * the path to /nifi, WEB UI, processor configuration: OK
> * the path to /nifi-api, stop processor, view provenance,
> [https://xxxx:19091/nifi-api/processors/28621407-017d-1000-31a3-58539fc2e94a/run-status|https://s3639tos.mc2.renault.fr:19091/nifi-api/processors/28621407-017d-1000-31a3-58539fc2e94a/run-status]
> : KO
>
> I use this config :
> {code:java}
> server {
> listen 19091;
> server_name nginx_server;
> proxy_ssl_trusted_certificate /etc/nginx/certs/xxx-cert.pem;
> proxy_ssl_certificate /etc/nginx/certs/xxx-cert.pem;
> proxy_ssl_certificate_key /etc/nginx/certs/xxx-key.pem;
> location / {
> proxy_ssl_server_name on;
> proxy_pass https://nifi_server:9091;
> proxy_set_header X-ProxyScheme https;
> proxy_set_header X-ProxyHost nifi_server;
> proxy_set_header X-ProxyPort 19091;
> #proxy_set_header X-ProxyContextPath /;
> proxy_set_header X-ProxiedEntitiesChain $ssl_client_s_dn;
> {code}
> Nifi properties 1:
> {code:java}
> nifi.web.proxy.context.path=
> nifi.web.proxy.host=nginx_server:19091 {code}
> Nifi properties 2:
> {code:java}
> nifi.web.proxy.context.path=/
> nifi.web.proxy.host=nginx_server:19091 {code}
>
> Nifi properties 3:
> {code:java}
> nifi.web.proxy.context.path=//,/nifi-api
> nifi.web.proxy.host=nginx_server:19091 {code}
>
> I read a lot time, but I don't sure that is need to push in
> nifi.web.proxy.context.path
> What is the correct configuration to setup ?
> Thanks.
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
