mozmeao / ee-infra-jenkins

Ansible playbook to install JenkinsCI. Used by Engagement Engineering
7 stars 10 forks source link

Update nginx config in this repo #18

Open jgmize opened 7 years ago

jgmize commented 7 years ago

To quickly resolve an expired cert issue I manually moved the TLS termination from nginx to an ELB with an ACM cert. I need to sync the nginx config in this repo with the one that's actually on the server.

limed commented 6 years ago

I'm not sure what your config on the server looks like but when I was testing ALB with ACM cert -> instance I used the following config

upstream jenkins {
  server 127.0.0.1:8080 fail_timeout=0;
}

server {
    listen 80 default_server;
    listen [::]:80 default_server;

        server_name _;
        if ($http_x_forwarded_proto = 'http') {
            return 301 https://$server_name$request_uri;
        }

    location / {
            proxy_set_header        Host $host;
            proxy_set_header        X-Real-IP $remote_addr;
            proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header        X-Forwarded-Proto $scheme;
        proxy_pass              http://jenkins;
        proxy_redirect      http:// https://;

    }
}

This was what worked for me

jgmize commented 6 years ago

@limed see #20