| Auszug |
|---|
|
Nuclos reverse proxy: Apache, AJP, ProxyPass, mod_proxy_ajp, VirtualHost, HTTPS, web client, rich client. |
Language: Deutsch · English
Running Nuclos behind a reverse proxy
Run Nuclos behind an Apache reverse proxy – AJP connector and vhost configuration for rich and web client.
| Status |
|---|
| colour | Blue |
|---|
| title | Administrator |
|---|
|
| Status |
|---|
| colour | Green |
|---|
| title | Updated: Jul 2026 |
|---|
|
| Status |
|---|
| colour | Grey |
|---|
| title | applies to Nuclos 4.2026.x |
|---|
|
Tomcat can run behind an Apache reverse proxy – e.g. when Nuclos should be served over HTTPS but port 443 is already taken.
The AJP connector must be enabled. Since Nuclos 4.8.0 this is done directly in the installer (step „Server configuration“) – no manual Tomcat change needed.
| Warnung |
|---|
|
The AJP protocol is mandatory, otherwise the access path to the Nuclos instance is not mapped correctly. |
Apache for the rich client (Java Web Start)
Create a vhost and adjust the domain:
| Codeblock |
|---|
|
<VirtualHost *:80>
ServerName nuclet.nuclos.de
ServerAlias nuclet.nuclos.de
Redirect 301 / https://nuclet.nuclos.de/
</VirtualHost>
<VirtualHost *:443>
ServerName nuclet.nuclos.de
ServerAlias nuclet.nuclos.de
ProxyRequests Off
SSLEngine on
SSLCertificateKeyFile /etc/apache2/ssl/nuclet.nuclos.de/nuclet.nuclos.de.key
SSLCertificateFile /etc/apache2/ssl/nuclet.nuclos.de/nuclet.nuclos.de.crt
SSLCertificateChainFile /etc/apache2/ssl/nuclet.nuclos.de/Intermediate_CA_Bundle.crt
ErrorDocument 503 "/var/www/maintance.html"
<Proxy *>
Order deny,allow
Allow from all
</Proxy>
ProxyPass / ajp://localhost:8009/
ProxyPassReverse / ajp://localhost:8009/
<Location />
Order allow,deny
Allow from all
</Location>
</VirtualHost> |
Enable the module and restart Apache:
| Codeblock |
|---|
|
a2enmod proxy_ajp
service apache2 restart |
Apache for the web client
| Codeblock |
|---|
|
<VirtualHost *:80>
ServerName www.example.org
ServerAlias www.example.org
Redirect 301 / https://www.example.org
</VirtualHost>
<VirtualHost *:443>
ServerName www.example.org
ServerAlias www.example.org
ProxyRequests Off
SSLEngine on
SSLCertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key
SSLCertificateFile /etc/ssl/certs/ssl-cert-snakeoil.pem
ErrorDocument 503 "/var/www/maintance.html"
<Proxy *>
Order deny,allow
Allow from all
</Proxy>
ProxyPass /nuclos-instanzname ajp://localhost:8010/nuclos-instanzname
ProxyPassReverse /nuclos-instanzname ajp://localhost:8010/nuclos-instanzname
ProxyPass / ajp://localhost:8010/webclient/
ProxyPassReverse / ajp://localhost:8010/webclient/
<Location />
Order allow,deny
Allow from all
</Location>
</VirtualHost> |
Related pages
External access to Nuclos
Access.
Open →
