From d0d99086d0d3dad5dba8ce974f1d73ac16966468 Mon Sep 17 00:00:00 2001 From: Julian Rommel <63144867+JulianRommel@users.noreply.github.com> Date: Thu, 12 Jan 2023 19:27:22 +0100 Subject: [PATCH 1/2] Added nginx reverse proxy example config I added a nginx example config if people want to put their local installation of Airbyte behind a reverse proxy. --- docs/operator-guides/security.md | 18 +++++++++++++++++- 1 file changed, 17 insertions(+), 1 deletion(-) diff --git a/docs/operator-guides/security.md b/docs/operator-guides/security.md index f095d1de9174..7581aafb0b03 100644 --- a/docs/operator-guides/security.md +++ b/docs/operator-guides/security.md @@ -37,7 +37,23 @@ Deploy Airbyte Open Source in a private network or use a firewall to filter whic You can secure access to Airbyte using the following methods: - Deploy Airbyte in a private network or use a firewall to filter which IP is allowed to access your host. -- Deploy Airbyte behind a reverse proxy and handle the access control on the reverse proxy side. +- Deploy Airbyte behind a reverse proxy and handle the access control and ssl encryption on the reverse proxy side. + ``` + # Example nginx reverse proxy config + server { + listen 443 ssl; + server_name airbyte..com; + client_max_body_size 200M; # required for Airbyte API + ssl_certificate .crt.pem; + ssl_certificate_key .key.pem; + + location / { + proxy_pass http://127.0.0.1:8000; + proxy_set_header Cookie $http_ccokie; # if you use Airbytes basic auth + proxy_read_timeout 3600; # set a number in seconds suitable for you + } + } + ``` - Change the default username and password in your environment's `.env` file: ``` # Proxy Configuration From 4de0f5a807f4ada648420650a9bc09dd16c701f3 Mon Sep 17 00:00:00 2001 From: Julian Rommel <63144867+JulianRommel@users.noreply.github.com> Date: Thu, 12 Jan 2023 19:38:06 +0100 Subject: [PATCH 2/2] Fixed a typo Changed "ssl" to upper case --- docs/operator-guides/security.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/operator-guides/security.md b/docs/operator-guides/security.md index 7581aafb0b03..3a50e59dc1e8 100644 --- a/docs/operator-guides/security.md +++ b/docs/operator-guides/security.md @@ -37,7 +37,7 @@ Deploy Airbyte Open Source in a private network or use a firewall to filter whic You can secure access to Airbyte using the following methods: - Deploy Airbyte in a private network or use a firewall to filter which IP is allowed to access your host. -- Deploy Airbyte behind a reverse proxy and handle the access control and ssl encryption on the reverse proxy side. +- Deploy Airbyte behind a reverse proxy and handle the access control and SSL encryption on the reverse proxy side. ``` # Example nginx reverse proxy config server {