Minemeld - NGINX reverse proxy

rhysxevans — Mon, 08 Apr 2019 16:43:39 GMT

I am trying to setup a minemeld server (docker image https://hub.docker.com/r/jtschichold/minemeld/ ) behind a Nginx reverse proxy. This however is to be hosted on a subpath, however I cant seem to get the authentication to work (This all works correctly is i don't use a subpath). In other apps, I have the option to set teh app base path etc.

My "frontend" nginx configuration is as per below (nginx/1.15.9 via nginx official docker image)

http {

  server {
      listen 80;
      return 301 https://$host$request_uri;
  }

  server {
      listen 443 ssl;

      access_log            /var/log/nginx/nginx.access.log;
      error_log            /var/log/nginx/nginx.error.log;

      ssl_certificate           /etc/pki/tls/certs/proxy.crt;
      ssl_certificate_key       /etc/pki/tls/private/proxy.key;
      ssl_trusted_certificate   /etc/nginx/certs/root-ca.pem;
      ssl_prefer_server_ciphers on;
      ssl_session_cache         shared:SSL:10m;
      ssl_session_timeout       5m;
      ssl_protocols             TLSv1.1 TLSv1.2 TLSv1.3;
      ssl_ciphers               "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA HIGH !RC4 !aNULL !eNULL !LOW !3DES !DES !MD5 !EXP !PSK !SRP !DSS";
      server_tokens             off;

      location /threat/ {
          proxy_pass https://minemeld/;
          #proxy_set_header Host $http_host;
          #proxy_redirect     off;
      }
      location / {
          proxy_pass https://kibana:5601/;
      }

  }

Any idea's on how best to do this ? I have tried numerous configurations for the "threat" locatin woth no luck

Any help is appreciated

Thanks

Re: Minemeld - NGINX reverse proxy

Nathaniel_Hall — Wed, 11 Mar 2020 18:49:05 GMT

I'm trying to do the same thing and have the same issues. Any progress?

Re: Minemeld - NGINX reverse proxy

rhysxevans — Wed, 11 Mar 2020 20:26:04 GMT

Hi,

Honestly, I haven't looked any further into this. Sorry

Thanks

topic Re: Minemeld - NGINX reverse proxy in General Topics

Minemeld - NGINX reverse proxy

Re: Minemeld - NGINX reverse proxy

Re: Minemeld - NGINX reverse proxy