Let's discuss how to set nginx reverse proxy in odoo
Why we need revese proxy?
Odoo runs on 8069 port by default and if you want to route it through other port, say 80 we can use nginx reverse proxy for that. It will also help to handle web services, if any, your odoo instance is providing to outside world.
What to do?
1. Install nginx
2. Create virtual host for your website/odoo instance. Let's say you want to run it on myodoo.com. Please create config file at location:
/etc/nginx/sites-available/myodoo.domain.com
CREATE symbolic link for this at
/etc/nginx/sites-enabled/myodoo.domain.com
Following is the code for ssl enabled config file
upstream myodoo {
server 127.0.0.1:8069;
}
server {
listen 443 default;
server_name myodoo.domain.com;
access_log /var/log/nginx/oddo.access.log;
error_log /var/log/nginx/oddo.error.log;
if ($scheme = http) {
return 301 https://myodoo.domain.com$request_uri;
}
# SSL cerificate details
ssl on;
ssl_certificate /etc/letsencrypt/live/myodoo.domain.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/myodoo.domain.com/privkey.pem; keepalive_timeout 60;
ssl_ciphers EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
proxy_buffers 16 64k;
proxy_buffer_size 128k;
location / {
proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
proxy_redirect off;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto https;
proxy_pass http://myodoo;
}
location ~* /web/static/ {
proxy_cache_valid 200 60m;
proxy_buffering on;
expires 864000;
proxy_pass http://myodoo;
}
}
## http redirects to https ##
server {
listen 80;
server_name myodoo.domain.com;
# Strict Transport Security
add_header Strict-Transport-Security max-age=2592000;
rewrite ^/.*$ https://$host$request_uri? permanent;
}
After this reload/restart your nginx (
sudo /etc/init.d/nginx reload) and your odoo instance will run on https://myodoo.domain.com and http will be rediected to https
I hope it will work for you as well. Please let me know if you are facing any issue.
Thanks!!!! Enjoy Programming!! :)
Comments
Post a Comment
Thanks for your valuable comments.