Step 3:

ARTIFACTORY: How to Enforce HTTP to HTTPS Redirection in Artifactory for browser access using Nginx and Helm Charts

AuthorFullName__c
Vignesh Surendrababu
articleNumber
000005693
ft:sourceType
Salesforce
FirstPublishedDate
2023-04-27T15:57:08Z
lastModifiedDate
2023-04-27
VersionNumber
1
Duplicate the entire artifactory.conf file from the directory located at "/etc/nginx/conf.d" and transfer it to your local machine.

Example artifactory.conf:
ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
ssl_certificate  /var/opt/jfrog/nginx/ssl/tls.crt;
ssl_certificate_key  /var/opt/jfrog/nginx/ssl/tls.key;
ssl_session_cache shared:SSL:1m;
ssl_prefer_server_ciphers   on;
## server configuration
server {
 listen 443 ssl;
 listen 80;
 server_name ~(?<repo>.+)\.jfrt-artifactory jfrt-artifactory;
 if ($http_x_forwarded_proto = '') {
   set $http_x_forwarded_proto  $scheme;
 }
 ## Application specific logs
 ## access_log /var/log/nginx/artifactory-access.log timing;
 ## error_log /var/log/nginx/artifactory-error.log;
 rewrite ^/artifactory/?$ / redirect;
 if ( $repo != "" ) {
   rewrite ^/(v1|v2)/(.*) /artifactory/api/docker/$repo/$1/$2 break;
 }
 chunked_transfer_encoding on;
 client_max_body_size 0;


 location / {
   proxy_read_timeout  900;
   proxy_pass_header   Server;
   proxy_cookie_path   ~*^/.* /;
   proxy_pass          http://jfrt-artifactory:8082/;
   proxy_set_header    X-JFrog-Override-Base-Url $http_x_forwarded_proto://$host:$server_port;
   proxy_set_header    X-Forwarded-Port  $server_port;
   proxy_set_header    X-Forwarded-Proto $http_x_forwarded_proto;
   proxy_set_header    Host              $http_host;
   proxy_set_header    X-Forwarded-For   $proxy_add_x_forwarded_for;
   add_header Strict-Transport-Security always;


   location /artifactory/ {
     if ( $request_uri ~ ^/artifactory/(.*)$ ) {
       proxy_pass       http://jfrt-artifactory:8081/artifactory/$1;
     }
     proxy_pass         http://jfrt-artifactory:8081/artifactory/;
   }
   location /pipelines/ {
     proxy_http_version 1.1;
     proxy_set_header Upgrade $http_upgrade;
     proxy_set_header Connection "upgrade";
     proxy_set_header Host $http_host;
     proxy_pass  http://jfrt-artifactory:8082;
   }
 }
}