Skip to main content

Nginx reverse proxy on odoo




Let's discuss how to set nginx reverse proxy in odoo

Why we need revese proxy?

Odoo runs on 8069 port by default and if you want to route it through other port, say 80 we can use nginx reverse proxy for that. It will also help to handle web services, if any, your odoo instance is providing to outside world.

What to do?

1. Install nginx

2. Create virtual host for your website/odoo instance. Let's say you want to run it on myodoo.com. Please create config file at location:


/etc/nginx/sites-available/myodoo.domain.com

CREATE symbolic link for this at

/etc/nginx/sites-enabled/myodoo.domain.com

Following is the code for ssl enabled config file

upstream myodoo {
    server 127.0.0.1:8069;
}
server {
        listen 443 default;
        server_name myodoo.domain.com;
        access_log /var/log/nginx/oddo.access.log;
        error_log /var/log/nginx/oddo.error.log;
        if ($scheme = http) {
                return 301 https://myodoo.domain.com$request_uri;
        }
        # SSL cerificate details
        ssl on;
        ssl_certificate /etc/letsencrypt/live/myodoo.domain.com/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/myodoo.domain.com/privkey.pem; keepalive_timeout 60;
        ssl_ciphers EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_prefer_server_ciphers on;
        proxy_buffers 16 64k;
        proxy_buffer_size 128k;
        location / {
                proxy_next_upstream error timeout invalid_header http_500 http_502  http_503 http_504;
                proxy_redirect off;
                proxy_set_header Host $host;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_set_header X-Forwarded-Proto https;
                proxy_pass http://myodoo;
        }
        location ~* /web/static/ {
                proxy_cache_valid 200 60m;
                proxy_buffering on;
                expires 864000;
                proxy_pass http://myodoo;
        }
}

 ## http redirects to https ##
server {
    listen      80;
    server_name myodoo.domain.com;
    # Strict Transport Security
    add_header Strict-Transport-Security max-age=2592000;
    rewrite ^/.*$ https://$host$request_uri? permanent;
}


After this reload/restart your nginx (
sudo /etc/init.d/nginx reload) and your odoo instance will run on https://myodoo.domain.com and http will be rediected to https

I hope it will work for you as well. Please let me know if you are facing any issue.

Thanks!!!! Enjoy Programming!! :)

Labels:
Location: Bengaluru, Karnataka, India

Comments

Post a Comment

Thanks for your valuable comments.

Popular posts from this blog

Odoo/OpenERP: one2one relational field example

one2one relational field is deprecated in OpenERP version>5 but you can achieve the same using many2one relational field. You can achieve it in following two ways : 1) using many2one field in both the objects ( http://tutorialopenerp.wordpress.com/2014/04/23/one2one/ ) 2)  using inheritance by deligation You can easily find the first solution with little search over internet so let's start with 2nd solution. Scenario :  I want to create a one2one relation between two objects of openerp hr.employee and hr.employee.medical.details What I should do  i. Add _inherits section in hr_employee class ii. Add field medical_detail_id in hr_employee class class hr_employee(osv.osv):     _name = 'hr.employee'     _inherits = {' hr.employee.medical.details ': "medical_detail_id"}     _inherit = 'hr.employee'         _columns = {              'emp_code':fields.char('Employee Code', si
12 comments
Read more

How to draw Dynamic Line or Timeseries Chart in Java using jfreechart library?

Today we are going to write a code to draw a dynamic timeseries-cum-line chart in java.   The only difference between simple and dynamic chart is that a dynamic event is used to create a new series and update the graph. In out example we are using timer which automatically calls a funtion after every 1/4 th second and graph is updated with random data. Let's try with the code : Note : I had tried my best to provide complete documentation along with code. If at any time anyone have any doubt or question please post in comments section. DynamicLineAndTimeSeriesChart.java import java.awt.BorderLayout; import java.awt.Color; import java.awt.event.ActionEvent; import java.awt.event.ActionListener; import javax.swing.Timer; import javax.swing.JPanel; import org.jfree.chart.ChartFactory; import org.jfree.chart.ChartPanel; import org.jfree.chart.JFreeChart; import org.jfree.chart.axis.ValueAxis; import org.jfree.chart.plot.XYPlot; import
37 comments
Read more

Flickr and OAuth

What is Flickr? I think you landed on this page because you know what Flickr is, so let’s come to the point and discuss about the API. Why am explaining? Although each and everything, about API, is well documented on Flickr website here , I'm just trying to explain the whole process by dividing it into small parts. Old Authentication API The current Flickr authorization scheme is not the first one it used. In the early days of Flickr, users granted the power to an app to act on their behalf by giving  the apps their Flickr username and password. Doing so meant that in order to revoke  an app’s permission, users would have to change their Flickr password. Of course, doing that would also instantly revoke permissions of other third-­party apps with knowledge of the user’s password. The new authorization scheme is meant to correct obvious problems with the old scheme. Why should you as a user have to use your Flickr password for anything other than your dealings with Flickr?
29 comments
Read more