How do I set up JIRA to work with SSL?

Question

JIRA

What I just didn’t do, I used both the official manual and various tips, nifiga.
Maybe someone had a real setup experience?

Answer 1

Or write in config:

<Connector 
                 SSLEnabled="true" 
                 acceptCount="100" 
                 clientAuth="false"
                 connectionTimeout="20000" 
                 disableUploadTimeout="true" 
                 enableLookups="false" 
                 keyAlias="jira" 
                 keystoreFile="C:\Program Files\Atlassian\Application Data\JIRA\jira" 
                 keystorePass="changeit" 
                 keystoreType="JKS" 
                 maxHttpHeaderSize="8192"
                 maxSpareThreads="75" 
                 maxThreads="150" 
                 minSpareThreads="25" 
                 port="443" 
                 protocol="org.apache.coyote.http11.Http11Protocol" 
                 scheme="https" 
                 secure="true" sslProtocol="TLS" 
                 useBodyEncodingForURI="true"/>

Before that, stuffing the keys into the vault (documentation on this case wagon ).
Or put nginx in front of the fat with SSL landing on it and then the config is like this:

<Connector 
                   port="8080"
                   maxThreads="300"
                   minSpareThreads="25"
                   connectionTimeout="20000"
                   enableLookups="false"
                   maxHttpHeaderSize="8192"
                   protocol="HTTP/1.1"
                   useBodyEncodingForURI="true"
                   acceptCount="1000"
                   disableUploadTimeout="true"
       scheme="https" 
       proxyName="%jira.domain.name%" 
       proxyPort="443"/>

Of course, before that, after setting everything up on nginx
, my Pysy now works both according to the first option and the second one at the same time.

Answer 2

A suitable option for nginx + jira turned out like this:

server {
    listen 80;
    server_name jira.myhost.com;
    rewrite ^(.+)$ https://jira.myhost.com$1 permanent;
}

server {
    listen 443;
    server_name jira.myhost.com;

    access_log /var/log/nginx/jira_access.log;
    error_log /var/log/nginx/jira_error.log;

    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl                  on;
    ssl_certificate     /etc/nginx/ssl/jira.myhost.com.crt;
    ssl_certificate_key  /etc/nginx/ssl/jira.myhost.com.key ;

    location / {
        proxy_pass http://127.0.0.1:8080;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-for $remote_addr;
        port_in_redirect off;
        proxy_redirect http://127.0.0.1:8080/ /;
        proxy_connect_timeout 300;        
   }
}

<Connector port="8080"
...тут все по дефолту...
scheme="https" 
proxyName="jira.myhost.com"
proxyPort="443"/>