Top Menu

Jump to content
Home
    • Projects
    • Activity
    • Work packages
    • Calendars
    • Team planners
    • Boards
    • News
    • Getting started
    • Introduction video
      Welcome to OpenProject Community
      Get a quick overview of project management and team collaboration with OpenProject. You can restart this video from the help menu.
    • Help and support
    • User guides
    • Videos
    • Shortcuts
    • Community forum
    • Enterprise support
    • Additional resources
    • Data privacy and security policy
    • Digital accessibility (DE)
    • OpenProject website
    • Security alerts / Newsletter
    • OpenProject blog
    • Release notes
    • Report a bug
    • Development roadmap
    • Add and edit translations
    • API documentation
  • Sign in
      Forgot your password?
      Create a new account

      or sign in with your existing account

      Google

Side Menu

  • Overview
  • Activity
    Activity
  • Roadmap
  • Work packages
    Work packages
  • Calendars
    Calendars
  • Team planners
    Team planners
  • Boards
    Boards
  • Forums
  • Feature tour
    Feature tour
You are here:
  • Forums
  • General discussion

Content

OpenProject + Ubuntu + ModSecurity - missing icons

Added by T H over 2 years ago

I only recently started using OP and really like it. However, out of the box, security isn't really strong (no SSL etc.) I wish the install process would include the LetsEncrypt process. Anyway, I installed ModSecurity for Apache as this app will be facing the internet and realized suddenly that images are gone. You can see it in the screenshot.

Has anybody found a way to get OP running with ModSecurity? I see some internal references seem to be hard-coded with http:// so that may cause the issues. I wonder why that was done. I understand SSL has only recently (5+ years...) been a focus on the internet, but somehow this doesn't instill confidence at first sight into the product as a whole.

Thanks in advance for your help!

TH


Replies (2)

RE: OpenProject + Ubuntu + ModSecurity - missing icons - Added by Markus Kahl over 2 years ago

Hey

Have you been using the packaged installation? During the installation process you are asked whether you would like to use SSL.
The default is no but that's because oftentimes people want to do their own SSL termination behind their own load balancer or proxy.

I don't know anything about ModSecurity. If you want SSL it's best to just choose 'Yes' in the wizard at the point where it asks for it.

Including letsencrypt in the wizard would indeed be rather useful. We may add that at some point.
Until then the easiest way is to install OP without SSL, setup the certificate as described in the docs and then reconfigure to use that certificate.

RE: OpenProject + Ubuntu + ModSecurity - missing icons - Added by Max Mutzge over 2 years ago

Please find the related feature request here: #36349

  • (1 - 2/2)
Loading...