Differences
This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision Next revision Both sides next revision | ||
tutorial:adm:server_preparation_tmp [2020/03/11 13:07] urbanl [DB server configuration -!CHANGED] |
tutorial:adm:server_preparation_tmp [2020/03/12 09:31] urbanl [nginx as reverse proxy] |
||
---|---|---|---|
Line 445: | Line 445: | ||
<Server port=" | <Server port=" | ||
</ | </ | ||
+ | -! CHANGED | ||
* Make Tomcat listen only on localhost: | * Make Tomcat listen only on localhost: | ||
- | * In the ''/ | + | * In the ''/ |
+ | * In same file configure ajp port('' | ||
+ | |||
+ | < | ||
+ | address=" | ||
+ | secretRequired=" | ||
+ | secret=" | ||
+ | port=" | ||
+ | redirectPort=" | ||
* Do not show aplication server version: | * Do not show aplication server version: | ||
Line 531: | Line 541: | ||
</ | </ | ||
- | HTTPd basic configuration: | + | HTTPd basic configuration |
- | Change MPM to worker (lower system requirements) - in the file ''/ | + | Change MPM to worker (lower system requirements) - in the file ''/ |
<code bash> | <code bash> | ||
Line 794: | Line 804: | ||
If you want to enable SSO to CzechIdM, additional configuration must be done with mod\_auth\_kerb. See [[tutorial: | If you want to enable SSO to CzechIdM, additional configuration must be done with mod\_auth\_kerb. See [[tutorial: | ||
- | ====== | + | ====== |
- | In case that you want to use nginx instead of Apache httpd, the configuration is as follows. | + | ==== 2. JDBC driver installation - CentOS8 ==== |
+ | **CentOS** | ||
- | <code ini> | + | Install the package with PostgreSQL JDBC driver: |
- | server { | + | |
- | listen | + | |
- | server_name | + | |
- | client_max_body_size 1G; | + | |
- | ssl on; | + | |
- | ssl_certificate | + | |
- | ssl_certificate_key | + | |
- | gzip on; | + | |
- | gzip_proxied any; | + | |
- | gzip_types | + | |
- | text/css | + | |
- | | + | |
- | text/xml | + | |
- | | + | |
- | application/ | + | |
- | | + | |
- | application/ | + | |
- | location / { | + | <code bash> |
- | proxy_hide_header X-Frame-Options; | + | yum install |
- | add_header X-Frame-Options SAMEORIGIN; | + | |
- | proxy_pass http:// | + | |
- | proxy_set_header Host $host; | + | |
- | proxy_set_header X-Real-IP $remote_addr; | + | |
- | proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; | + | |
- | proxy_set_header X-Forwarded-Proto " | + | |
- | proxy_ssl_session_reuse off; | + | |
- | proxy_redirect off; | + | |
- | + | ||
- | # WebSocket support | + | |
- | proxy_http_version 1.1; | + | |
- | proxy_set_header Upgrade $http_upgrade; | + | |
- | proxy_set_header Connection " | + | |
- | } | + | |
- | } | + | |
</ | </ | ||
+ | allow Tomcat to use the driver: | ||
+ | |||
+ | <code bash> | ||
+ | ln -s / | ||
+ | </ |