Skip to main content

Nginx reverse proxy on odoo




Let's discuss how to set nginx reverse proxy in odoo

Why we need revese proxy?

Odoo runs on 8069 port by default and if you want to route it through other port, say 80 we can use nginx reverse proxy for that. It will also help to handle web services, if any, your odoo instance is providing to outside world.

What to do?

1. Install nginx

2. Create virtual host for your website/odoo instance. Let's say you want to run it on myodoo.com. Please create config file at location:


/etc/nginx/sites-available/myodoo.domain.com

CREATE symbolic link for this at

/etc/nginx/sites-enabled/myodoo.domain.com

Following is the code for ssl enabled config file

upstream myodoo {
    server 127.0.0.1:8069;
}
server {
        listen 443 default;
        server_name myodoo.domain.com;
        access_log /var/log/nginx/oddo.access.log;
        error_log /var/log/nginx/oddo.error.log;
        if ($scheme = http) {
                return 301 https://myodoo.domain.com$request_uri;
        }
        # SSL cerificate details
        ssl on;
        ssl_certificate /etc/letsencrypt/live/myodoo.domain.com/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/myodoo.domain.com/privkey.pem; keepalive_timeout 60;
        ssl_ciphers EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_prefer_server_ciphers on;
        proxy_buffers 16 64k;
        proxy_buffer_size 128k;
        location / {
                proxy_next_upstream error timeout invalid_header http_500 http_502  http_503 http_504;
                proxy_redirect off;
                proxy_set_header Host $host;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_set_header X-Forwarded-Proto https;
                proxy_pass http://myodoo;
        }
        location ~* /web/static/ {
                proxy_cache_valid 200 60m;
                proxy_buffering on;
                expires 864000;
                proxy_pass http://myodoo;
        }
}

 ## http redirects to https ##
server {
    listen      80;
    server_name myodoo.domain.com;
    # Strict Transport Security
    add_header Strict-Transport-Security max-age=2592000;
    rewrite ^/.*$ https://$host$request_uri? permanent;
}


After this reload/restart your nginx (
sudo /etc/init.d/nginx reload) and your odoo instance will run on https://myodoo.domain.com and http will be rediected to https

I hope it will work for you as well. Please let me know if you are facing any issue.

Thanks!!!! Enjoy Programming!! :)

Labels:
Location: Bengaluru, Karnataka, India

Comments

Post a Comment

Thanks for your valuable comments.

Popular posts from this blog

Odoo/OpenERP: one2one relational field example

one2one relational field is deprecated in OpenERP version>5 but you can achieve the same using many2one relational field. You can achieve it in following two ways : 1) using many2one field in both the objects ( http://tutorialopenerp.wordpress.com/2014/04/23/one2one/ ) 2)  using inheritance by deligation You can easily find the first solution with little search over internet so let's start with 2nd solution. Scenario :  I want to create a one2one relation between two objects of openerp hr.employee and hr.employee.medical.details What I should do  i. Add _inherits section in hr_employee class ii. Add field medical_detail_id in hr_employee class class hr_employee(osv.osv):     _name = 'hr.employee'     _inherits = {' hr.employee.medical.details ': "medical_detail_id"}     _inherit = 'hr.employee'         _columns = {             ...
12 comments
Read more

How to draw Dynamic Line or Timeseries Chart in Java using jfreechart library?

Today we are going to write a code to draw a dynamic timeseries-cum-line chart in java.   The only difference between simple and dynamic chart is that a dynamic event is used to create a new series and update the graph. In out example we are using timer which automatically calls a funtion after every 1/4 th second and graph is updated with random data. Let's try with the code : Note : I had tried my best to provide complete documentation along with code. If at any time anyone have any doubt or question please post in comments section. DynamicLineAndTimeSeriesChart.java import java.awt.BorderLayout; import java.awt.Color; import java.awt.event.ActionEvent; import java.awt.event.ActionListener; import javax.swing.Timer; import javax.swing.JPanel; import org.jfree.chart.ChartFactory; import org.jfree.chart.ChartPanel; import org.jfree.chart.JFreeChart; import org.jfree.chart.axis.ValueAxis; import org.jfree.chart.plot.XYPlot; import...
37 comments
Read more

pyodbc.OperationalError: ('08001', '[08001] [Microsoft][ODBC Driver 17 for SQL Server]

Recently, I faced this error in our Docker-Container environment. All the necessary packages were already installed but still, I was facing this clueless error. I search a bit and after an hour and so I found the exact reason and solution for this error. To know more about this error in detail. Please follow this Github thread. https://github.com/mkleehammer/pyodbc/issues/610 https://github.com/mkleehammer/pyodbc/issues/610#issuecomment-587523802 Solution: It's because the   server's certificate has too weak a key. In case you are using Linux env directly/not the Docker one.  Just edited /etc/ssl/openssl.cnf and change these 2 lines. MinProtocol = TLSv1.0 CipherString = DEFAULT@SECLEVEL=1 In case you are also using a container, please add these three lines to your Docker file. RUN chmod +rwx /etc/ssl/openssl.cnf RUN sed -i ' s/TLSv1.2/TLSv1/g ' /etc/ssl/openssl.cnf RUN sed -i ' s/SECLEVEL=2/SECLEVEL=1/g ' /etc/ssl/openssl.cnf Thanks!! Enjoy Programming! Refer...
1 comment
Read more