Hi Innocent,
Yes, a reverse proxy should work and in general it's not a bad idea when
you're exposing Ceph Dashboard to a public network. You'll also have to
manually update the "GRAFANA_FRONTEND_API_URL" option ("ceph dashboard
set-grafana-frontend-api-url <url>") with the public facing URL (instead of
the internal domain URL).
Regarding the Cloudflare configuration, I cannot help you there.
Kind Regards,
Ernesto
On Mon, Nov 15, 2021 at 1:12 PM Innocent Onwukanjo <ciousdev@xxxxxxxxx>
wrote:
> Hi Ernesto. Thanks sooo much for the reply. I am actually new to ceph and
> you are right. I would try that out right now. But please I wanted to know
> if using a reverse proxy method to map ceph Dashboard to a domain name is
> the way to go?
> Lastly, I setup my sub domain name using CloudFlare. Wen I run a dig on
> the subdomain name I get 2 IP addresses which are not related to the public
> IP address where my ceph dashboard runs.
> Is this normal? Because when I ping the subdomain I get the IP address of
> the instance.
> Thanks
>
> On Mon, 15 Nov 2021, 10:10 Ernesto Puerta, <epuertat@xxxxxxxxxx> wrote:
>
>> Hi,
>>
>> What was the error it threw? Did you intentionally set it up for HTTP? If
>> you're not using a L7 load balancer, you can still configure a reverse
>> proxy with HTTPS in both SSL passthrough and SSL termination modes, so no
>> need to turn HTTPS off.
>>
>> By default the Ceph Dashboard runs with HTTPS (8443), while the default
>> HTTP port is 8080. It looks like there might be a process already listening
>> to that port.
>>
>> I suggest you check the mgr logs <http://logs> while reloading it and
>> provide any relevant data from there.
>>
>> Kind Regards,
>> Ernesto
>>
>>
>> On Sun, Nov 14, 2021 at 7:56 AM Innocent Onwukanjo <ciousdev@xxxxxxxxx>
>> wrote:
>>
>>> Hi!
>>>
>>> While trying to set a domain name for my company's ceph cluster, I used
>>> Nginx on another server to reverse proxy the public IP address of the
>>> dashboard and the port 8443. The domain name is from CloudFlare. The
>>> dashboard came up for HTTP only but threw error for HTTPS and I could not
>>> log in. So I removed the self signed certificate and disabled the
>>> dashboard.
>>> Re-Enabling the dashboard, I now get the error message:
>>>
>>> Error EIO: Module 'dashboard' has experienced an error and cannot handle
>>> commands: Timeout('Port 8443 not free on ceph.phpsandbox.io.',)
>>>
>>> Thanks.
>>> _______________________________________________
>>> ceph-users mailing list -- ceph-users@xxxxxxx
>>> To unsubscribe send an email to ceph-users-leave@xxxxxxx
>>>
>>>
_______________________________________________
ceph-users mailing list -- ceph-users@xxxxxxx
To unsubscribe send an email to ceph-users-leave@xxxxxxx
