Install Nginx dan Config Reverse Proxy #3

Dokumentasi Instalasi Nginx & Reverse Proxy

1. update sistem

sudo apt update -y
sudo apt upgrade -y

2. Install Nginx

sudo apt install nginx -y

Aktifkan dan jalankan Nginx:

sudo systemctl enable --now nginx

cek status service nginx

sudo sysytemctl status nginx

3. Allow port nginx pada firewall

cek status firewall

sudo ufw status

Allow port jika firewall aktif

sudo ufw allow 'Nginx Full'

perintah ini allow nginx pda port 80 dan 443

Konfigurasi Hosts

Edit file /etc/hosts untuk menambahkan domain lokal:

nano /etc/hosts

tambahkan baris berikut:

127.0.0.1       localhost localhost.gisportal.id
127.0.1.1       arcgis arcgis.gisportal.id

Konfigurasi Reverse Proxy

Buat file konfigurasi baru untuk domain lokal

sudo nano /etc/nginx/conf.d/gisportal.id.conf

Isi dengan konfigurasi berikut:

server {
    listen 80;
    server_name arcgis.gisportal.id;

    # redirect HTTP ke HTTPS
    return 301 https://$host$request_uri;
}

server {
    listen 443 ssl;
    server_name arcgis.gisportal.id;

    ssl_certificate     /etc/ssl/gisportal.id.crt;
    ssl_certificate_key /etc/ssl/gisportal.id.key;
    ssl_password_file   /etc/ssl/password.txt;

    location / {
        proxy_pass https://127.0.0.1:8443/;
        proxy_ssl_verify off;

        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto https;

        proxy_connect_timeout 300s;
        proxy_send_timeout 300s;
        proxy_read_timeout 300s;
    }
}

masuk ke direktori nginx lalu pilih nginx.conf

cd /etc/nginx/nginx.conf

pastikan terdapat instruksi include sesuai dengan detail

Tes Konfigurasi Nginx

Input perintah

nginx -t

Pastikan outputnya succesfull

Verifikasi

Buka browser dan akses:

http://arcgis.gisportal.id

Jika konfigurasi berhasil, domain arcgis.gisportal akan diarahkan ke aplikasi Tomcat yang berjalan di port 8080.

# Dokumentasi Instalasi Nginx & Reverse Proxy ## 1. update sistem ``` sudo apt update -y sudo apt upgrade -y ``` ## 2. Install Nginx ``` sudo apt install nginx -y ``` Aktifkan dan jalankan Nginx: ``` sudo systemctl enable --now nginx ``` cek status service nginx ``` sudo sysytemctl status nginx ``` ![image](/attachments/74a40410-7d55-4a47-bf3f-abf0fe8f9ebe) ## 3. Allow port nginx pada firewall cek status firewall ``` sudo ufw status ``` Allow port jika firewall aktif ``` sudo ufw allow 'Nginx Full' ``` perintah ini allow nginx pda port 80 dan 443 ## Konfigurasi Hosts Edit file /etc/hosts untuk menambahkan domain lokal: ``` nano /etc/hosts ``` tambahkan baris berikut: ``` 127.0.0.1 localhost localhost.gisportal.id 127.0.1.1 arcgis arcgis.gisportal.id ``` ## Konfigurasi Reverse Proxy Buat file konfigurasi baru untuk domain lokal ``` sudo nano /etc/nginx/conf.d/gisportal.id.conf ``` Isi dengan konfigurasi berikut: ``` server { listen 80; server_name arcgis.gisportal.id; # redirect HTTP ke HTTPS return 301 https://$host$request_uri; } server { listen 443 ssl; server_name arcgis.gisportal.id; ssl_certificate /etc/ssl/gisportal.id.crt; ssl_certificate_key /etc/ssl/gisportal.id.key; ssl_password_file /etc/ssl/password.txt; location / { proxy_pass https://127.0.0.1:8443/; proxy_ssl_verify off; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto https; proxy_connect_timeout 300s; proxy_send_timeout 300s; proxy_read_timeout 300s; } } ``` masuk ke direktori nginx lalu pilih nginx.conf ``` cd /etc/nginx/nginx.conf ``` pastikan terdapat instruksi include sesuai dengan detail ![image](/attachments/1f0a14c8-03c3-4880-bf56-964af80d2a74) ## Tes Konfigurasi Nginx Input perintah ``` nginx -t ``` Pastikan outputnya succesfull ![image](/attachments/10de211b-8e37-4054-b797-fc8461d42f86) ## Verifikasi Buka browser dan akses: http://arcgis.gisportal.id Jika konfigurasi berhasil, domain arcgis.gisportal akan diarahkan ke aplikasi Tomcat yang berjalan di port 8080. ![image](/attachments/a7acc2f7-edd0-489e-813a-ecfe8bef8129)

image.png

81 KiB

image.png

31 KiB

image.png

8.2 KiB

image.png

330 KiB