Configurare un reverse proxy con nginx per accedere a proxmox direttamente in http

From RVM Wiki
Jump to navigation Jump to search

TODO: vedi anche:


Installazione nginx

Debian Wheezy

  • Poichè la console di proxmox usa websockets, è necessario installare ngix>=1.4. Se si iinstalla lo stock wheezy, funziona tutto, ma non la console:
sudoedit /etc/apt/sources.list

deb http://ftp.it.debian.org/debian wheezy-backports main contrib non-free

sudo apt-get update
  • Installare nginx
sudo apt-get -t wheezy-backports install nginx

Debian Jessie

  • Installare nginx
sudo apt-get install nginx

Configurazione nginx

  • Preparare i certificati:
servername.example.priv.key
servername.example.priv.crt
  • Copiarli:
sudo cp servername.example.priv.crt /etc/ssl/certs/servername.example.priv.crt
sudo cp servername.example.priv.key /etc/ssl/private/servername.example.priv.key
  • Rimuovere la configurazione di base di nginx
sudo rm -f /etc/nginx/sites-enabled/default
  • Creare la nuova:
sudoedit /etc/nginx/sites-enabled/proxmox-gui

server {
    listen 80 default_server;
    rewrite ^(.*) https://$host$1 permanent;
}

server {
    listen 443;
    server_name myserver.example.priv;
    
    ssl on;
    ssl_certificate /etc/ssl/certs/servername.example.priv.crt;
    ssl_certificate_key /etc/ssl/private/servername.example.priv.key;
    
    proxy_redirect off;
    location / {
    	proxy_set_header X-Forwarded-Proto https;
        proxy_pass https://servername.example.priv:8006;
        
       # Enable websockets for the noVNC console to work
        proxy_http_version 1.1;
	proxy_set_header Connection $http_connection;
	proxy_set_header Origin http://$host;
	proxy_set_header Upgrade $http_upgrade;
    }
}

# vim subsitution :%s/servername.example.priv/realname.domain.priv/gc
  • Riavviare nginx:
sudo service nginx restart

Riferimenti

Retrieved from "https://kb.rvmgroup.it/index.php?title=Configurare_un_reverse_proxy_con_nginx_per_accedere_a_proxmox_direttamente_in_http&oldid=9681"