Category Archives: Sysadmin

Below we show how to install Keycloak in ubuntu behind Nginx proxy and also use PostgreSQL as its database. //download keycloadk and unzip wget https://github.com/keycloak/keycloak/releases/download/19.0.1/keycloak-legacy-19.0.1.zip //create admin user cd keycloak-legacy-19.0.1/ ./bin/add-user-keycloak.sh -r master -u admin -p mypassword //start keycloak ./bin/standalone.sh //enable proxy for keycloak by adding proxy-address-forwarding=”true” vim standalone/configuration/standalone.xml <http-listener name=”default” socket-binding=”http” redirect-socket=”https” enable-http2=”true” proxy-address-forwarding=”true”/> […]

For installing and serving R Shiny Server behind Nginx reverse proxy we first install it by: sudo apt-get install r-base sudo su – \ -c “R -e \”install.packages(‘shiny’, repos=’https://cran.rstudio.com/’)\”” sudo apt-get install gdebi-core sudo gdebi shiny-server-1.5.16.958-amd64.deb Before installing some R Shiney packages we should install: sudo apt-get install libssl-dev libcurl4-openssl-dev Then we can install R […]

For installing and serving Konga behind Nginx reverse proxy we first clone the project and install npm modules and run :   git clone https://github.com/pantsel/konga.git   cd konga   npm i   npm run start   It is time to add the reverse proxy in Nginx as below:   sudo vim /etc/nginx/nginx.conf server { location […]

For serving React app behind reverse proxy such as Nginx or Apache We first create an application using create-react-app Create a react app using npx like: npx create-react-app portal Then install serve node package like: npm install -g serve Then you need to update the package.json and add two lines below (assume we want to […]

For installing SSL certificate for Nginx in Ubuntu you need to have two files: SSL crt file and SSL private key file and then put inside the server section in nginx.conf like the example below:   sudo vim /etc/nginx/nginx.conf server { listen 443 ssl; ssl_certificate /PATH_TO_SSL_CRT_FILE.crt; ssl_certificate_key /PATH_TO_SSL_PRIVATE.key; server_tokens off; root /var/www; server_name www.yourdomain.com; client_max_body_size […]

First you need to run below commands:     sudo touch /etc/authbind/byport/80   sudo chmod 500 /etc/authbind/byport/80   sudo chown tomcat8 /etc/authbind/byport/80   Then you need to add AUTHBIND=yes in /etc/default/tomcat8   Here you can change the JAVA_HOME & JAVA_OPTS: JAVA_HOME=/usr/lib/jvm/java-8-openjdk-amd64   JAVA_OPTS=”-Djava.awt.headless=true -XX:+UseConcMarkSweepGC -Xms512m -Xmx4G -XX:PermSize=512M -Dorg.owasp.esapi.resources=/var/lib/tomcat8/webapps/ROOT/WEB-INF/classes/ESAPI.properties” AUTHBIND=yes   Then you need to change […]

Assuming the Geoserver war file is running inside tomcat in port 7000 like: localhost:7000/geoserver Also a valid SSL certificate has configured in NGINX. First you need to change Tomcat port and add proxyPort in server.xml  :   sudo vim /etc/tomcat8/server.xml   Then search for “Connector port” and change the port number and also proxyPort to […]

For changing Tomcat port you need to change the connection port in server.xml  :   sudo vim /etc/tomcat8/server.xml   Then search for “Connector port” and change the port number (example 8080 to 7000):   Connector port=”7000″ protocol=”HTTP/1.1″ connectionTimeout=”20000″ redirectPort=”8443″ />   In example above we change the port from 8080 to 7000    Then you […]