<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Hi,<div class=""><br class=""></div><div class="">If you are planning to leave each virtual server open to the world, you should be fine just recording the application urls (example: AppConfig[:backend_url] = ‘<a href="http://archivesspace-api.example.org" class="">archivesspace-api.example.org</a>’). But if you are going to restrict www access to the api service or the staff interface, you’ll need to do something like what’s described here: <a href="https://github.com/archivesspace/archivesspace/blob/master/README_HTTPS.md" class="">https://github.com/archivesspace/archivesspace/blob/master/README_HTTPS.md</a>. The proxy settings you mentioned are useful if the frontend_url is localhost:8080 but port 8080 isn’t accessible to end users.</div><div class=""><br class=""></div><div class="">Brian</div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""><div><blockquote type="cite" class=""><div class="">On May 4, 2016, at 12:30 PM, Stephen Schor <<a href="mailto:stephenschor@nypl.org" class="">stephenschor@nypl.org</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="ltr" class="">Hi.<div class=""><br class=""></div><div class="">I'm looking to deploy ASpace using NGIX as a proxy to present the various apps on port 80.</div><div class="">For example:</div><div class=""><br class=""></div><blockquote style="margin:0px 0px 0px 40px;border:none;padding:0px" class=""><div class=""><font face="arial, helvetica, sans-serif" class=""><span style="color:rgb(51,51,51);font-size:14px;line-height:20px" class="">proxy port 8080 to <a href="http://archivesspace-staff.example.org/" class="">archivesspace-staff.example.org</a> to port 80</span></font></div><div class=""><font face="arial, helvetica, sans-serif" class=""><span style="color:rgb(51,51,51);font-size:14px;line-height:20px" class="">proxy port 8081 to <a href="http://archivesspace-public.example.org/" class="">archivesspace-public.example.org</a> </span><span style="color:rgb(51,51,51);font-size:14px;line-height:20px" class=""> to </span><span style="color:rgb(51,51,51);font-size:14px;line-height:20px" class="">port 80</span></font></div><div class=""><font face="arial, helvetica, sans-serif" class=""><span style="color:rgb(51,51,51);font-size:14px;line-height:20px" class="">proxy port 8089 to <a href="http://archivesspace-api.example.org/" class="">archivesspace-api.example.org</a> </span><span style="color:rgb(51,51,51);font-size:14px;line-height:20px" class=""> to </span><span style="color:rgb(51,51,51);font-size:14px;line-height:20px" class="">port 80</span></font></div></blockquote><div class=""><span style="color:rgb(51,51,51);font-size:14px;line-height:20px" class=""><font face="monospace, monospace" class=""><br class=""></font></span></div><div class=""><font color="#333333" class=""><span style="font-size:14px;line-height:20px" class=""><font face="Arial, sans-serif" class="">I'm interested in what the consequences are of leaving the boilerplate setup in </font><font face="monospace, monospace" class="">config.rb</font><font face="Arial, sans-serif" class=""> would be?</font></span></font></div><div class=""><font color="#333333" class=""><span style="font-size:14px;line-height:20px" class=""><font face="Arial, sans-serif" class="">It was this section that caught my attention:</font></span></font></div><div class=""><font color="#333333" class=""><span style="font-size:14px;line-height:20px" class=""><font face="Arial, sans-serif" class=""><br class=""></font></span></font></div><blockquote style="margin:0 0 0 40px;border:none;padding:0px" class=""><div class=""><font color="#333333" class=""><div class=""><span style="line-height:20px" class=""><font face="monospace, monospace" class="">## Proxy URLs</font></span></div></font></div><div class=""><font color="#333333" class=""><div class=""><span style="line-height:20px" class=""><font face="monospace, monospace" class="">## If you are serving user-facing applications via proxy</font></span></div></font></div><div class=""><font color="#333333" class=""><div class=""><span style="line-height:20px" class=""><font face="monospace, monospace" class="">## (i.e., another domain or port, or via https, or for a prefix) it is</font></span></div></font></div><div class=""><font color="#333333" class=""><div class=""><span style="line-height:20px" class=""><font face="monospace, monospace" class="">## recommended that you record those URLs in your configuration</font></span></div></font></div><div class=""><font color="#333333" class=""><div class=""><span style="line-height:20px" class=""><font face="monospace, monospace" class="">#AppConfig[:frontend_proxy_url] = proc { AppConfig[:frontend_url] }</font></span></div></font></div><div class=""><font color="#333333" class=""><div class=""><span style="line-height:20px" class=""><font face="monospace, monospace" class="">#AppConfig[:public_proxy_url] = proc { AppConfig[:public_url] }</font></span></div></font></div></blockquote><div class=""><font color="#333333" class=""><div style="font-family:Arial,sans-serif;font-size:14px;line-height:20px" class=""><br class=""></div><div style="font-family:Arial,sans-serif;font-size:14px;line-height:20px" class=""><br class=""></div></font></div></div>
_______________________________________________<br class="">Archivesspace_Users_Group mailing list<br class=""><a href="mailto:Archivesspace_Users_Group@lyralists.lyrasis.org" class="">Archivesspace_Users_Group@lyralists.lyrasis.org</a><br class="">http://lyralists.lyrasis.org/mailman/listinfo/archivesspace_users_group<br class=""></div></blockquote></div><br class=""></div></body></html>