nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

Alfresco integration with Fortigate reverse proxy

jefry_kur

Hi Experts,

I am new about Alfresco, and I want to using reverse proxy in my system. The reason why I want to do this because there is a need to use HTTPS protocol and release my system to the internet. My question is, which file should I modify to enable this feature? So far, I have read many documentation and forum about this and they say to change file alfresco-global.properties. I will attach my changes below:

1. alfresco-global.properties

ir.root=C:/Alfresco/alf_data

alfresco.context=alfresco

#alfresco.host=127.0.0.1

alfresco.host=103.229.12.52

alfresco.port=8443

alfresco.protocol=https

share.context=share

share.host=103.229.12.52

share.port=8443

share.protocol=https

opencmis.context.override=true

opencmis.context.value=

opencmis.servletpath.override=true

opencmis.servletpath.value=

opencmis.server.override=true

opencmis.server.value=https://103.229.12.52

aos.baseUrlOverwrite=https://103.229.12.52/alfresco/aos

note: 103.229.12.52 is Public IP for my alfresco system.

After restart my tomcat, I still cannot open the page from internet. If there any mis-configuration that I did? According to my Infrastructure team, I don't need to import SSL certificate to Alfresco since they have imported the certificate in their reverse proxy server. Kindly need your advise

Regards,

Jefry

Find more posts tagged with

Comments

angelborroy

Have you tried including your external SSL ports? Change "alfresco.port" and "share.port" to 443.

jefry_kur

Hi Angel,

I have tried to do that, and I still cannot open the page. If there any file that I should modified to use reverse proxy? I tried to change share-config-custom.xml by adding below lines:

<!--

Will be used and exposed to the client side code in Alfresco.contants.CSRF_POLICY.

Use the Alfresco.util.CSRFPolicy.getHeader() or Alfresco.util.CSRFPolicy.getParameter() with Alfresco.util.CSRFPolicy.getToken()

to set the token in custom 3rd party code.

-->

<cookie>Alfresco-CSRFToken</cookie>

<header>Alfresco-CSRFToken</header>

<parameter>Alfresco-CSRFToken</parameter>

</client>

<!--

Certain Surf POST requests form the WebScript console must be allowed to pass without a token since

the Surf WebScript console code can't be dependent on a Share specific filter.

-->

<rule>

</request>

<param name="always">false</param>

<param name="referer">https://103.229.12.52/.*</param>

</action>

<param name="always">false</param>

<param name="origin">https://103.229.12.52</param>

</action>

</rule>

<rule>

<path>^/page/dologin.*|^\/page/site\/[^\/]+\/start-workflow|^\/page/start-workflow</path>

</request>

<param name="always">false</param>

<param name="referer">https://103.229.12.52/.*</param>

</action>

<param name="always">false</param>

<param name="origin">https://103.229.12.52</param>

</action>

</rule>

<rule>

<path>^/page/dologout.*</path>

</request>

<param name="session">Alfresco-CSRFToken</param>

<param name="cookie">Alfresco-CSRFToken</param>

</action>

</rule>

<rule>

</session>

</request>

<param name="session">Alfresco-CSRFToken</param>

<param name="cookie">Alfresco-CSRFToken</param>

</action>

</rule>

<rule>

</session>

</request>

<param name="session">Alfresco-CSRFToken</param>

<param name="cookie">Alfresco-CSRFToken</param>

</action>

</rule>

<rule>

<header name="Content-Type">^multipart/.*</header>

</session>

</request>

<param name="session">Alfresco-CSRFToken</param>

<param name="parameter">Alfresco-CSRFToken</param>

</action>

<param name="always">false</param>

<param name="referer">https://103.229.12.52/.*</param>

</action>

<param name="always">false</param>

<param name="origin">https://103.229.12.52</param>

</action>

</rule>

<!--

Verify there is a token in the header for remaining state changing requests and also correct

referer & origin headers if available. We "catch" all content types since just setting it to

"application/json.*" since a webscript that doesn't require a json request body otherwise would be

successfully executed using i.e. "text/plain".

-->

<rule>

<method>POST|PUT|DELETE</method>

</session>

</request>

<param name="session">Alfresco-CSRFToken</param>

<param name="header">Alfresco-CSRFToken</param>

</action>

<param name="always">false</param>

<param name="referer">https://103.229.12.52/.*</param>

</action>

<param name="always">false</param>

<param name="origin">https://103.229.12.52</param>

</action>

</rule>

</filter>

</config>

Thanks and regards,

Jefry

angelborroy

Maybe this can help you BeeCon 2016 >> Talks

No modification is required in "share-config-custom.xml".