<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;">
<div>Thanks.</div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span>Zach Mullen <<a href="mailto:zach.mullen@kitware.com">zach.mullen@kitware.com</a>><br>
<span style="font-weight:bold">Date: </span>Wednesday, October 21, 2015 at 7:20 PM<br>
<span style="font-weight:bold">To: </span>Brian Chapman <<a href="mailto:brian.chapman@utah.edu">brian.chapman@utah.edu</a>><br>
<span style="font-weight:bold">Cc: </span>"<a href="mailto:girder-users@public.kitware.com">girder-users@public.kitware.com</a>" <<a href="mailto:girder-users@public.kitware.com">girder-users@public.kitware.com</a>><br>
<span style="font-weight:bold">Subject: </span>Re: [Girder-users] Serving Girder over HTTPS from Docker<br>
</div>
<div><br>
</div>
<div>
<div>
<div dir="ltr">Hi Brian,
<div><br>
</div>
<div>We typically set this up using a proxy like Nginx or Apache. Here's an example Nginx config for an SSL-only deployment of girder:</div>
<div><br>
</div>
<div>
<pre style="color:rgb(0,0,0)">server {
listen 80 default_server;
listen [::]:80 default_server ipv6only=on;
# redirect to https
return 307 <a href="https://$host$request_uri">https://$host$request_uri</a>;
}
server {
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/my_cert.pem;
ssl_certificate_key /etc/nginx/ssl/my_cert.key;
add_header Strict-Transport-Security "max-age=15552000";
root {{ girder_root }}/clients/web;
# Make site accessible from <a href="http://localhost/">http://localhost/</a>
server_name localhost;
location / {
proxy_pass <a href="http://localhost:8080">http://localhost:8080</a>;
proxy_set_header X-Forwarded-Host $http_host;
proxy_set_header X-Forwarded-Server $host;
include /etc/nginx/proxy_params;
# The following settings should allow SSE to work
proxy_buffering off;
proxy_cache off;
proxy_set_header Connection '';
proxy_http_version 1.1;
chunked_transfer_encoding off;
proxy_read_timeout 600s;
proxy_send_timeout 600s;
}
location /static {
try_files $uri $uri/ /index.html;
}
}</pre>
<pre style="color:rgb(0,0,0)"><br></pre>
<pre style="color:rgb(0,0,0)"><font face="arial,helvetica,sans-serif">The only thing you'd need to modify in the above config is the locations of the cert and key files.</font></pre>
<pre style="color:rgb(0,0,0)"><span style="font-family: arial, helvetica, sans-serif;">Hope this helps,</span><br></pre>
<pre style="color:rgb(0,0,0)"><font face="arial,helvetica,sans-serif"><br></font></pre>
</div>
</div>
<div class="gmail_extra"><br clear="all">
<div>
<div class="gmail_signature">
<div dir="ltr">
<div>
<div dir="ltr">Zach Mullen<br>
Kitware, Inc.<br>
919-869-8858</div>
</div>
</div>
</div>
</div>
<br>
<div class="gmail_quote">On Wed, Oct 21, 2015 at 9:15 PM, Brian E Chapman <span dir="ltr">
<<a href="mailto:Brian.Chapman@utah.edu" target="_blank">Brian.Chapman@utah.edu</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div style="word-wrap:break-word;color:rgb(0,0,0);font-size:14px;font-family:Calibri,sans-serif">
<div>Hi everyone,</div>
<div><br>
</div>
<div>We’ve got an instance of Girder running user Docker containers for both MongoDB and Girder. This was nice and painless. However, it is running over http. Curious if there is any easy way with Girder directly to make this run over https or if the assumption
is that this would be done with Apache Redirect (or equivalent).</div>
<div><br>
</div>
<div>Brian</div>
<div>
<div>
<div>— </div>
<div>Brian E. Chapman, Ph.D.</div>
<div>Associate Professor</div>
<div>Department of Radiology</div>
<div>University of Utah</div>
<div><br>
</div>
</div>
</div>
</div>
<br>
_______________________________________________<br>
Girder-users mailing list<br>
<a href="mailto:Girder-users@public.kitware.com">Girder-users@public.kitware.com</a><br>
<a href="http://public.kitware.com/mailman/listinfo/girder-users" rel="noreferrer" target="_blank">http://public.kitware.com/mailman/listinfo/girder-users</a><br>
<br>
</blockquote>
</div>
<br>
</div>
</div>
</div>
</span>
</body>
</html>