If I install OpenProject behind a HAProxy, do I need Apache2 on the OpenProject VM, or can I just go from HAProxy to port 6000?

Hello,

You can just go directly to port 6000, unless you required the managed git/svn repository feature (which you probably don't)

thank you; port 6000 is listening locally; how do I change the config of unicorn from 127.0.0.1 to 0.0.0.0?

I did not find a way to set the listening IP before the configuration, but after the configuration just:

• vim /etc/openproject/conf.d/other
• export HOST="0.0.0.0"
• reboot

Configuration for HAProxy without openproject Apache2. You need only 
http-request set-header X-Forwarded-Proto https if { ssl_fc }

Do not use

openproject config:set SERVER_PROTOCOL_FORCE_HTTPS="true"

Finally as administrator in the setting set

Host name: projects.mydomain.com
Protocol: HTTPS

other interesting things:

to set user password before the configuration (after package installation)

vim /opt/openproject/app/seeders/admin_user_seeder.rb

and add

user.password =
user.mail =
user.force_password_change = false

to avoid demo data

vim /opt/openproject/app/seeders/root_seeder.rb
#puts '*** Seeding demo data'
#DemoDataSeeder.new.seed!
#if seed_development_data?
#  seed_development_data
#end

to deactivate self registration before configuration (after package installation):

vim /opt/openproject/config/settings.yml
self_registration:
default: '0'

you can change other parameters too (but you can easily change those setting afterwards using the browser)