Proxy_set_header X-Forward-For $proxy_add_x_forwarded_for # fetch OCSP records from URL in ssl_certificate and cache themĪdd_header Strict-Transport-Security "max-age=63072000 includeSubdomains preload " always Īdd_header X-Content-Type-Options "nosniff" always Īdd_header X-XSS-Protection "1 mode=block" always Īdd_header X-Download-Options noopen always Īdd_header X-Permitted-Cross-Domain-Policies none always Īdd_header Referrer-Policy no-referrer always # Server should determine the ciphers, not the client #ssl_dhparam /etc/nginx/ssl/dhparams.pem # Diffie-Hellman parameter for DHE ciphersuites, recommended 4096 bits Ssl_certificate_key /etc/ssl/private/nginx-selfsigned.key Ssl_certificate /etc/ssl/certs/nginx-selfsigned.crt I had to put this * in there due to limitation of new forum users only allowed to post 2 links.Somewhere I found a hint that IP-Adress as URL is not supported (which is bad for me because I want to have access thru VPN as well where no DNS is available) so I also tried with the machines hostname as URL with the same result (http*s://hostname)Ĭan anyone assist how to troubleshoot this? I put a file with the line OVERWRITE_SETTING_ROOT_URL= in /var/snap/rocketchat-server/common I setup nginx according to this instructions: Īccording to this instructions: I tried to set ROOT_URL to the new URL (http*s://10.xx.xx.64). Server Setup InformationĮven though I use my setup in LAN only I want to have SSL, therefore I wanted to use nginx as a reverse proxy using a self signed certificate. However, when I open the URL from outside nginx reverse proxy the browser loads only the page name but nothing else (blank page). Access to the Server thru the machine’s IP and default port (10.xx.xx.64:3000) works.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |