AA-2902 : Install and configure Nginx

Review Request #890 — Created May 29, 2025 and submitted

pmurugaiyan
AMP
amp_4_0
AA-2902
apoorva.sn, prajesh, shuinvy

Installed Nginx and setup the self signed certificate.

AMP application -> https://<server-ip>/ (Local - http://127.0.0.1:3000)
Kibana -> https://<server-ip>/visualization (Local - http://127.0.0.1:5601)

[root@localhost opt]# sh install_nginx.sh
[INFO] Starting Nginx installation script. Logs are saved to /var/log/nginx_installation.log
[INFO] Using server IP: 192.168.85.63
[INFO] Installing Nginx from Rocky Linux AppStream repository...
[INFO] Nginx installed successfully.
[INFO] Checking if Kibana is running at http://127.0.0.1:5601...
[INFO] Kibana is accessible at http://127.0.0.1:5601.
[WARN] Main application is not running at http://127.0.0.1:3000. Using static page instead.
[INFO] Creating SSL directory: /etc/nginx/ssl
[INFO] Generating self-signed SSL certificate for 192.168.85.63...
[INFO] Self-signed certificate generated: /etc/nginx/ssl/server.crt and /etc/nginx/ssl/server.key
[INFO] Configuring SELinux for Nginx...
[INFO] Configuring FirewallD for HTTP (80) and HTTPS (443)...
[INFO] FirewallD configured to allow HTTP and HTTPS traffic.
[INFO] Configuring Kibana with base path /visualization...
[INFO] Restarting Kibana to apply configuration...
[INFO] Kibana configured with base path /visualization.
[INFO] Configuring Nginx for custom app and Kibana.
[INFO] Creating Nginx configuration file: /etc/nginx/conf.d/app.conf
[INFO] Nginx configuration created: /etc/nginx/conf.d/app.conf
[INFO] Testing Nginx configuration syntax...
[INFO] Nginx configuration syntax is OK.
[INFO] Starting and enabling Nginx service...
[INFO] Nginx service started and enabled successfully.
[INFO] Verifying Kibana accessibility at https://192.168.85.63/visualization...
[INFO] Kibana is accessible at https://192.168.85.63/visualization.
[INFO] Verifying path accessibility for Kibana and custom app...
[INFO] Path accessibility check completed.
[INFO] Nginx configuration complete. Serving custom app and Kibana on port 443.
[INFO] Ensure your firewall allows inbound traffic to ports 80 and 443.
[INFO] **************
[INFO]
IMPORTANT ACCESS INFORMATION
[INFO]
****************
[INFO] - Custom application: https://192.168.85.63 (e.g., /, /login)
[INFO] - Kibana: https://192.168.85.63/visualization (e.g., /visualization/login)
[WARN] Browsers will show security warnings for the self-signed certificate. For production, obtain a trusted certificate from Let's Encrypt: https://letsencrypt.org/
[INFO] Full installation log: /var/log/nginx_installation.log


Description From Last Updated

Default value deos not seem to be apt.

prajeshprajesh

Change it to BNG to reflect Bangalore office or even APV cert defaults to keep it uniform.

prajeshprajesh

Keep only strong ciphers.

prajeshprajesh
prajesh
  1. 
      
  2. Default value deos not seem to be apt.

  3. Change it to BNG to reflect Bangalore office or even APV cert defaults to keep it uniform.

  4. Keep only strong ciphers.

  5. 
      
pmurugaiyan
prajesh
  1. Ship It!
  2. 
      
prajesh
  1. Ship It!
  2. 
      
pmurugaiyan
Review request changed

Status: Closed (submitted)

Loading...