OpenProject behind NGINX Reverse proxy

Hello all! I am new to the openproject space and loving it so far. I have it funcally running with a remote db perfectly! My issue lies in the fact that my hosting location only has a single ip address and I use it for multiple things. I already had a nginx reverse proxy up to do this pointing to many other web servers. When I create the openproject webserver and went through the reconfigure, I did the remote db which is working well, installed apache2 as the web server, did not setup ssl, and setup memcached. I then went to my nginx reverse proxy and pointed it at http://ip-of-op-web-server:80 and then went to my external records and pointed my sub domain for op to the reverse proxy public ip. That works and everything flows fine, I can post the apache or nginx config if needed. The error I get is this: HTTPS mode setup mismatch
Your application is running with HTTPS mode set to http, but the request is an https request. This will result in errors! You will need to set the following configuration value: OPENPROJECT_HTTPS=true. Please see the installation documentation on how to set this configuration. I don't know how to get ride of this and can't find a ton of people online that are doing apache2 behind nginx reverse proxy as that is my needed setup. Please let me know what more I need to post or explain. I'm not sure if its wrong to install apache in general, if I should just point nginx reverse proxy at the ip:6000 but that just didn't work at all when I tried it. I have the https certificate setup on the reverse proxy right now via nginx lets encrypt. TIA!

Replies (1)

RE: OpenProject behind NGINX Reverse proxy - Added by Jim Fieser over 1 year ago

I too am limited with IP addresses and using Nginx to reverse proxy to my OpenProject server (with separate db server). I selected "server/ssl no" in the TUI openproject reconfigure, but when I try to access port 6000 from my proxy server I get "failed: Connection refused." When I try to see the page from the local openproject ruby server, I see:

wget http://127.0.0.1:6000
--2024-05-07 15:39:03--  http://127.0.0.1:6000/
Connecting to 127.0.0.1:6000... connected.
HTTP request sent, awaiting response... 301 Moved Permanently
Location: https://127.0.0.1:6000/ [following]
--2024-05-07 15:39:03--  https://127.0.0.1:6000/
Connecting to 127.0.0.1:6000... connected.
OpenSSL: error:0A00010B:SSL routines::wrong version number
Unable to establish SSL connection.

So, not only are other IP addresses being refused, ruby is forcing encrypted communication on the same VM! I would like to turn off this superfluous encryption and open port 6000 (or another port) to other IP addresses withing my virtual private cloud.

Side Menu

Content