diff options
author | Hjf288 <hjf288@gmail.com> | 2015-12-28 23:43:06 +0000 |
---|---|---|
committer | Hjf288 <hjf288@gmail.com> | 2015-12-28 23:43:06 +0000 |
commit | 7b6a6abb4bb58e264a794b752e555d5a79e2f8b6 (patch) | |
tree | a0ecdeea0cab2cfbedd1d9f5b389c750803a15da /doc/install/Production-Ubuntu.md | |
parent | 2f04ea6dd292e2b11e1fc4149ae1ea759d31bea5 (diff) | |
download | chat-7b6a6abb4bb58e264a794b752e555d5a79e2f8b6.tar.gz chat-7b6a6abb4bb58e264a794b752e555d5a79e2f8b6.tar.bz2 chat-7b6a6abb4bb58e264a794b752e555d5a79e2f8b6.zip |
GIT-1682: Complete the SSL configuration section of the documentation and normalise the spacing in the NGINX config examples
Diffstat (limited to 'doc/install/Production-Ubuntu.md')
-rw-r--r-- | doc/install/Production-Ubuntu.md | 71 |
1 files changed, 41 insertions, 30 deletions
diff --git a/doc/install/Production-Ubuntu.md b/doc/install/Production-Ubuntu.md index da3487f45..e3f91f2a1 100644 --- a/doc/install/Production-Ubuntu.md +++ b/doc/install/Production-Ubuntu.md @@ -107,19 +107,20 @@ exec bin/platform * Below is a sample configuration with the minimum settings required to configure Mattermost ``` server { - server_name mattermost.example.com; + server_name mattermost.example.com; + location / { - client_max_body_size 50M; - proxy_set_header Upgrade $http_upgrade; - proxy_set_header Connection "upgrade"; - proxy_set_header Host $http_host; - proxy_set_header X-Real-IP $remote_addr; - proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - proxy_set_header X-Forwarded-Proto $scheme; - proxy_set_header X-Frame-Options SAMEORIGIN; - proxy_pass http://10.10.10.2:8065; + client_max_body_size 50M; + proxy_set_header Upgrade $http_upgrade; + proxy_set_header Connection "upgrade"; + proxy_set_header Host $http_host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + proxy_set_header X-Frame-Options SAMEORIGIN; + proxy_pass http://10.10.10.2:8065; } - } + } ``` * Remove the existing file with * ``` sudo rm /etc/nginx/sites-enabled/default``` @@ -151,29 +152,39 @@ exec bin/platform 4. Modify the file at `/etc/nginx/sites-available/mattermost` and add the following lines: ``` server { - listen 80; - server_name mattermost.example.com; - return 301 https://$server_name$request_uri; + listen 80; + server_name mattermost.example.com; + return 301 https://$server_name$request_uri; } server { - listen 443 ssl; - server_name mattermost.example.com; - - ssl on; - ssl_certificate /home/ubuntu/cert/mattermost.crt; - ssl_certificate_key /home/ubuntu/cert/mattermost.key; - ssl_dhparam /home/ubuntu/cert/dhparam.pem; - ssl_session_timeout 5m; - ssl_protocols TLSv1 TLSv1.1 TLSv1.2; - ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH'; - ssl_prefer_server_ciphers on; - ssl_session_cache shared:SSL:10m; + listen 443 ssl; + server_name mattermost.example.com; + + ssl on; + ssl_certificate /home/ubuntu/cert/mattermost.crt; + ssl_certificate_key /home/ubuntu/cert/mattermost.key; + ssl_dhparam /home/ubuntu/cert/dhparam.pem; + ssl_session_timeout 5m; + ssl_protocols TLSv1 TLSv1.1 TLSv1.2; + ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH'; + ssl_prefer_server_ciphers on; + ssl_session_cache shared:SSL:10m; - # add to location / above - location / { - gzip off; - proxy_set_header X-Forwarded-Ssl on; + location / { + gzip off; + proxy_set_header X-Forwarded-Ssl on; + client_max_body_size 50M; + proxy_set_header Upgrade $http_upgrade; + proxy_set_header Connection "upgrade"; + proxy_set_header Host $http_host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + proxy_set_header X-Frame-Options SAMEORIGIN; + proxy_pass http://10.10.10.2:8065; + } + } ``` |