Monday, 8 May 2017

Nginx reverse proxy on odoo

Let's discuss how to set nginx reverse proxy in odoo

Why we need revese proxy?

Odoo runs on 8069 port by default and if you want to route it through other port, say 80 we can use nginx reverse proxy for that. It will also help to handle web services, if any, your odoo instance is providing to outside world.

What to do?

1. Install nginx

2. Create virtual host for your website/odoo instance. Let's say you want to run it on myodoo.com. Please create config file at location:


/etc/nginx/sites-available/myodoo.domain.com

CREATE symbolic link for this at

/etc/nginx/sites-enabled/myodoo.domain.com

Following is the code for ssl enabled config file

upstream myodoo {
    server 127.0.0.1:8069;
}
server {
        listen 443 default;
        server_name myodoo.domain.com;
        access_log /var/log/nginx/oddo.access.log;
        error_log /var/log/nginx/oddo.error.log;
        if ($scheme = http) {
                return 301 https://myodoo.domain.com$request_uri;
        }
        # SSL cerificate details
        ssl on;
        ssl_certificate /etc/letsencrypt/live/myodoo.domain.com/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/myodoo.domain.com/privkey.pem; keepalive_timeout 60;
        ssl_ciphers EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_prefer_server_ciphers on;
        proxy_buffers 16 64k;
        proxy_buffer_size 128k;
        location / {
                proxy_next_upstream error timeout invalid_header http_500 http_502  http_503 http_504;
                proxy_redirect off;
                proxy_set_header Host $host;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_set_header X-Forwarded-Proto https;
                proxy_pass http://myodoo;
        }
        location ~* /web/static/ {
                proxy_cache_valid 200 60m;
                proxy_buffering on;
                expires 864000;
                proxy_pass http://myodoo;
        }
}

## http redirects to https ##
server {
    listen      80;
    server_name myodoo.domain.com;
    # Strict Transport Security
    add_header Strict-Transport-Security max-age=2592000;
    rewrite ^/.*$ https://$host$request_uri? permanent;
}


After this reload/restart your nginx (
sudo /etc/init.d/nginx reload) and your odoo instance will run on https://myodoo.domain.com and http will be rediected to https

I hope it will work for you as well. Please let me know if you are facing any issue.

Thanks!!!! Enjoy Programming!! :)

No comments:

Post a Comment

Thanks for your valuable comments.

Gmail: Download blocked file

Hi, today we are going to learn, how to download blocked file in gmail. Sometimes you see following message in gmail: and you can...