[ome-users] Omero + nginx https?

[Aleksandra Tarkowska]

Great. Thank you for point in that out. I have just added  appropriate references that will appear with the next release.

Kind regards
Ola

From: Jake Carroll <jake.carroll at uq.edu.au<mailto:jake.carroll at uq.edu.au>>
Date: Tue, 29 Jul 2014 11:19:31 +0000
To: Aleksandra Tarkowska <a.tarkowska at dundee.ac.uk<mailto:a.tarkowska at dundee.ac.uk>>
Cc: "ome-users at lists.openmicroscopy.org.uk<mailto:ome-users at lists.openmicroscopy.org.uk>" <ome-users at lists.openmicroscopy.org.uk<mailto:ome-users at lists.openmicroscopy.org.uk>>
Subject: Re: [ome-users] Omero + nginx https?

Yep.

All done, and all good. I've made some self-signed crts and keys already just to get moving - but I'll request some true trusted keys and authoritative stores shortly bound to the real FQDN.

Surprisingly easy and simple to do.

Thanks, all!

-jc


On 29 Jul 2014, at 9:00 pm, Aleksandra Tarkowska <A.Tarkowska at dundee.ac.uk<mailto:A.Tarkowska at dundee.ac.uk>> wrote:

Hi Jake

For your production system-wide nginx instance you just need the following:

$ bin/omero web config nginx -system

And then you can tweak it with

server {
    listen         80 default;
    server name    your_domain.com;
    rewrite        ^ https://$server_name$request_uri? permanent;
}

server {

    listen       443 default ssl;

    ssl on;
    ssl_certificate /PATHTOYOUR/bundle.crt;
    ssl_certificate_key /PATHTOYOUR/cert_key.key;

    server_name  your_domain.com;

    location /omero/static {
            alias ...;
        }

        location /omero {
             ...
        fastcgi_param HTTPS on;


I presume you can handle self-signed/trusted certificate import

Kind regards
Ola

From: Jake Carroll <jake.carroll at uq.edu.au<mailto:jake.carroll at uq.edu.au>>
Date: Tue, 29 Jul 2014 10:07:54 +0000
To: "ome-users at lists.openmicroscopy.org.uk<mailto:ome-users at lists.openmicroscopy.org.uk>" <ome-users at lists.openmicroscopy.org.uk<mailto:ome-users at lists.openmicroscopy.org.uk>>
Subject: [ome-users] Omero + nginx https?

Hi all,

Another day, another question.

Does anyone have Omero deployed using nginx + an https layer? Kind of not feeling too happy about the use of OME over the default config of an http plain connect and would like to deploy over https, if possible.

I've found some interesting comments like this:

     # Uncomment if nginx SSL module is enabled or you are using nginx 1.1.11 or later
            # -- See: #10273, http://nginx.org/en/CHANGES
            # fastcgi_param HTTPS $https;
        }

After running a omero web config nginx

Any thoughts or direction would be appreciated.

I'm guessing this wouldn't normally be so hard, except I realise django is in some way involved - so deploying over https might not be as simple as I had expected?

Be useful if the OME guys (or someone else out there) had put a "how to" up.

Thank you.

Regards,

-jc

_______________________________________________ ome-users mailing list ome-users at lists.openmicroscopy.org.uk<mailto:ome-users at lists.openmicroscopy.org.uk> http://lists.openmicroscopy.org.uk/mailman/listinfo/ome-users
The University of Dundee is a registered Scottish Charity, No: SC015096


The University of Dundee is a registered Scottish Charity, No: SC015096
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openmicroscopy.org.uk/pipermail/ome-users/attachments/20140729/fc5bb65e/attachment.html>