Sticking MAAS behind https for web and api?

[Peter Matulis]

It should definitely change the URL in /etc/maas/regiond.conf . I just
tried it. Although I am running 2.2 (beta2).

You would also need to use the server name that is on the SSL
certificate (not 'localhost').

On Fri, Feb 17, 2017 at 12:27 PM, Jim Tilander <jim at tilander.org> wrote:
> I hadn’t. I tried that command, it didn’t seem to change /etc/maas/regiond.conf (where is the URL setting kept?)
>
> Restarting the maas-regiond afterwards broke the webUI, no response. I had to revert back.
>
>> On Feb 17, 2017, at 6:44 AM, Peter Matulis <peter.matulis at canonical.com> wrote:
>>
>> Did you change the MAAS URL?
>>
>> sudo maas-region local_config_set --maas-url https://localhost:5240/MAAS
>> sudo systemctl restart maas-regiond
>>
>>
>> On Tue, Feb 14, 2017 at 9:44 PM, Jim Tilander <jim at tilander.org> wrote:
>>> Hi,
>>>
>>> So I’ve been trying to stick my server behind https, with little success.
>>>
>>> I’ve added an extra site in the apache config and stuck a certificate in place. I can hit https and the site *kind* of works, but there are still some strange redirects back to regular http (notably after the login).
>>>
>>> Is there any config that I can modify to disable the redirects to regular http?
>>>
>>> There is also a config file in /etc/maas/regiond.conf (I think that’s the file from memory here) that list the twisted port the python service is running under. This is a http port. Is there any way that I can change this to be served under https? (simply changing it to https doesn’t seem to work so well).
>>>
>>> Cheers,
>>> Jim
>>>
>>>
>>>
>>> --
>>> Maas-devel mailing list
>>> Maas-devel at lists.ubuntu.com
>>> Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/maas-devel
>