Skip to content

Instantly share code, notes, and snippets.

@achimnol
Last active July 30, 2016 19:04
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save achimnol/3efd296c4d8a311e444d to your computer and use it in GitHub Desktop.
Save achimnol/3efd296c4d8a311e444d to your computer and use it in GitHub Desktop.
sharelatex SSL reverse-proxy setting
server {
...
ssl on;
# Some mobile browsers require full-chain certificates.
ssl_certificate /var/lib/sharelatex/ssl/myserver-fullchain-cert.pem;
ssl_certificate_key /var/lib/sharelatex/ssl/myserver-privkey.pem;
ssl_session_timeout 3m;
# http basic auth is no longer required since sharelatex now only allows user addition by admins.
location / {
...
}
location /socket.io {
...
}
}
@leeopop
Copy link

leeopop commented Mar 15, 2016

Using cat > /etc/nginx/sites-enabled/sharelatex.conf

server {
    listen         80;
    server_name    _; # Catch all, see http://nginx.org/en/docs/http/server_names.html

    set $static_path /var/www/sharelatex/web/public;
    ssl on;
    ssl_certificate /var/lib/sharelatex/ssl/star.kaist.ac.kr.crt;
    ssl_certificate_key /var/lib/sharelatex/ssl/star.kaist.ac.kr.key;
    ssl_session_timeout 3m;


    location / {
        proxy_pass http://127.0.0.1:3000;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_set_header X-Forwarded-Host $host;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_read_timeout 3m;
        proxy_send_timeout 3m;
    }

    location /socket.io {
        proxy_pass http://127.0.0.1:3026;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_set_header X-Forwqarded-Host $host;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_read_timeout 3m;
        proxy_send_timeout 3m;
    }

    location /stylesheets {
        expires 1y;
        root $static_path/;
    }

    location /minjs {
        expires 1y;
        root $static_path/;
    }

    location /img {
        expires 1y;
        root $static_path/;
    }
}

@leeopop
Copy link

leeopop commented Jul 30, 2016

server {
listen 80;
server_name latex.kaist.ac.kr;

return 301 https://$server_name$request_uri;

}

server {
listen 443;
server_name _; # Catch all, see http://nginx.org/en/docs/http/server_names.html

    set $static_path /var/www/sharelatex/web/public;
    ssl on;
    ssl_certificate /var/lib/sharelatex/ssl/fullchain.pem;
    ssl_certificate_key /var/lib/sharelatex/ssl/privkey.pem;

..........

@leeopop
Copy link

leeopop commented Jul 30, 2016

docker run -d -v /root/sharelatex-data:/var/lib/sharelatex -p 80:80 -p 443:443 --env SHARELATEX_MONGO_URL=mongodb://172.17.0.1/sharelatex --env SHARELATEX_SITE_URL=https://latex.kaist.ac.kr --env SHARELATEX_REDIS_HOST=172.17.0.1 --name=sharelatex sharelatex/sharelatex

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment