Ask Your Question
0

Where to find openstack-dashboard.conf in the latest DevStack release?

asked 2017-06-06 19:57:45 -0500

zetret gravatar image

updated 2017-06-07 18:28:14 -0500

I have tried searching for it everywhere but is not present.

find /etc -iname "openstack-dashboard.conf"

returns nothing. According to the documentation, it's supposed to be here: /etc/apache2/conf.d/openstack-dashboard.conf

But, I don't have a directory called "conf.d" under apache2. I am running devstack as the default user called "stack".

I am trying to make Horizon use "https" instead of "http". Any other good documentation instead of the one on openstack.org?

EDIT: Found horizon.conf but still don't understand what should be the values for port 443 under the virtualhosts tag.

Thanks

edit retag flag offensive close merge delete

1 answer

Sort by ยป oldest newest most voted
0

answered 2017-06-07 03:51:34 -0500

Hi our ssl terminates on a proxy now, but we had something like

<VirtualHost *:443>
RewriteEngine on
RewriteRule ^/$ https://%{HTTP_HOST}/horizon [L,R]
ServerName horizon.example.com
SSLEngine On
SSLCertificateFile /etc/ssl/certs/example.com.crt
SSLCACertificateFile /etc/ssl/certs/example.com.ca-bundle
SSLCertificateKeyFile /etc/ssl/private/example.com.key
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown

#HTTP Strict Transport Security (HSTS) enforces that all communications
# with a server go over SSL. This mitigates the threat from attacks such
# as SSL-Strip which replaces links on the wire, stripping away https prefixes
# and potentially allowing an attacker to view confidential information on the
# wire
Header add Strict-Transport-Security "max-age=15768000"
# same as for http here
WSGIScriptAlias / /usr/share/openstack-dashboard/openstack_dashboard/wsgi/django.wsgi
WSGIDaemonProcess horizon user=horizon group=horizon processes=4 threads=10
WSGIProcessGroup horizon
Alias /static /usr/share/openstack-dashboard/openstack_dashboard/static/
<Directory /usr/share/openstack-dashboard/openstack_dashboard/wsgi>
# For Apache http server 2.2 and earlier:
#Order allow,deny
#Allow from all

# For Apache http server 2.4 and later:
Require all granted
</Directory>

CustomLog /var/log/apache2/openstack_access_log common
</VirtualHost>
edit flag offensive delete link more

Comments

Hi As you have the complete path , not relative ones, for WSGIScriptAlias And Alias you don't need a DocumentRoot. Will be the servers default then. SSL termination on a proxy means, the SSL session terminates on a loadbalancer in front of the dashboard, which balances the requests in plain http.

Frank_SU_HH gravatar imageFrank_SU_HH ( 2017-06-07 23:47:09 -0500 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

Stats

Asked: 2017-06-06 19:57:45 -0500

Seen: 149 times

Last updated: Jun 07 '17