为Jenkins设置HTTPS

Question

为Jenkins设置HTTPS的推荐方法是什么？

1. 在Jenkins本身中设置HTTPS
2. 使用Apache作为HTTPS设置的代理

我们有一个VM，其中Jenkins是唯一的应用程序。

Answer 1

我使用的并且我认为最简单的方法是使用nginx作为代理，示例配置：

root@redacted-jenkins-2:/etc/nginx/sites-available# cat jenkins_http.conf
#Ansible managed

server {
   listen 80;
   server_name jenkins.redacted.com.ar;
   return 301 https://jenkins.redacted.com.ar$request_uri;
}

server {
   listen 443 ssl;
   server_name jenkins.redacted.com.ar;
   ssl_certificate /etc/letsencrypt/live/jenkins.redacted.com.ar/fullchain.pem;
   ssl_certificate_key /etc/letsencrypt/live/jenkins.redacted.com.ar/privkey.pem;
   ssl_trusted_certificate /etc/letsencrypt/live/jenkins.redacted.com.ar/fullchain.pem;
   include /etc/nginx/snippets/ssl.conf;
   location / {
     proxy_set_header        Host $host:$server_port;
     proxy_set_header        X-Real-IP $remote_addr;
     proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
     proxy_set_header        X-Forwarded-Proto $scheme;
     proxy_redirect http:// https://;
     proxy_pass              http://127.0.0.1:8080;
   }

}