Skip to content

Configuring the HTTP server

Set up proxy rules for Customizer, Orient Me, Microsoft Teams integration, Tailored Experience for Communities, Activities Plus, and the Microsoft Outlook add-in for Connections 8.0 CR3.

Using the sample deployment described in Steps to install or upgrade to Component Pack, the Kubernetes master node is used in the proxy rules in this document. In an HA environment, the load balancer DNS of the HA cluster should be used (must be FQHN).

Infrastructure

Add the following rules to your httpd.conf on your IBM HTTP servers and restart the service:

# jsonapi
ProxyPass "/jsonapi" "http://cpmaster.internal.example.com:32080/jsonapi"
ProxyPassReverse "/jsonapi" "http://cpmaster.internal.example.com:32080/jsonapi"

Nginx

After setting up Customizer (see Set up Customizer), set up your reverse proxy to forward some traffic to the customizer by sending it to KUBERNETES:30301. For Nginx, it would look like this:

location ~      ^/(files/customizer|files/app|communities/service/html|forums/html|search/web|homepage/web|social/home|mycontacts|wikis/home|blogs|news|activities/service/html|profiles/html|viewer)  { 

            proxy_pass http://cpmaster.internal.example.com:30301; 

}

Orient Me

After setting up Orient Me, refer to Set up Orient Me for OpenSearch. You need to set rewrite rules in httpd.conf on your IBM HTTP Server to enable sending requests to it from Connections.

Add the rewrites to your httpd.conf on the IBM HTTP Server, and then restart the service:

# OrientMe Config 
ProxyPreserveHost On 
ProxyPass "/social" "http://cpmaster.internal.example.com:32080/social" 
ProxyPassReverse "/social" "http://cpmaster.internal.example.com:32080/social" 
ProxyPass "/itm" "http://cpmaster.internal.example.com:32080/itm" 
ProxyPassReverse "/itm" "http://cpmaster.internal.example.com:32080/itm" 
ProxyPass "/community_suggestions/api/recommend/communities" "http://cpmaster.internal.example.com:32080/community_suggestions/api/recommend/communities" 
ProxyPassReverse "/community_suggestions/api/recommend/communities" "http://cpmaster.internal.example.com:32080/community_suggestions/api/recommend/communities" 
ProxyPass "/appreg" "http://cpmaster.internal.example.com:32080/appreg/" 
ProxyPassReverse "/appreg" "http://cpmaster.internal.example.com:32080/appreg/" 
ProxyPass "/appregistry" "http://cpmaster.internal.example.com:32080/appregistry" 
ProxyPassReverse "/appregistry" "http://cpmaster.internal.example.com:32080/appregistry"

Microsoft Teams integration

Once the microservices are installed and running for Microsoft Teams integration, see Set up Microsoft Teams integration and add the following rules to your httpd.conf on your IBM HTTP Server and restart the server:

# teams-tab-ui
ProxyPass "/teams-tab" "http://cpmaster.internal.example.com:32080/teams-tab" 
ProxyPassReverse "/teams-tab" "http://cpmaster.internal.example.com:32080/teams-tab"    
# teams-share-service 
ProxyPass "/teams-share-service" "http://cpmaster.internal.example.com:32080/teams-share-service" 
ProxyPassReverse "/teams-share-service" "http://cpmaster.internal.example.com:32080/teams-share-service"
# teams-share-ui 
ProxyPass "/teams-share-ui" "http://cpmaster.internal.example.com:32080/teams-share-ui" 
ProxyPassReverse "/teams-share-ui" "http://cpmaster.internal.example.com:32080/teams-share-ui"

# Teams SameSite Fix
# Add SameSite property to all server-side set-cookie response headers
Header edit Set-Cookie ^(.*)$ "$1; SameSite=None;Secure"

# Fix for Embedded Experiences content loading in Teams Tab iframe
Header unset Content-Security-Policy
Header always set Content-Security-Policy "frame-ancestors 'self' teams.microsoft.com *.teams.microsoft.com *.skype.com"

Tailored Experience

After setting up Tailored Experience features see Set up Tailored Experience features for communities, and add the following rules to your httpd.conf on your IBM HTTP servers and restart the service:

# proxy rules for admin-portal
ProxyPass "/cnxadmin" "http://cpmaster.internal.example.com:32080/cnxadmin"  
ProxyPassReverse "/cnxadmin" "http://cpmaster.internal.example.com:32080/cnxadmin"
# proxy rules for community-template-service
ProxyPass "/comm-template" "http://cpmaster.internal.example.com:32080/comm-template/templates" 
ProxyPassReverse "/comm-template" "http://cpmaster.internal.example.com:32080/comm-template/templates"
# proxy rules for te-creation-wizard
ProxyPass "/te-creation-wizard/" "http://cpmaster.internal.example.com:32080/te-creation-wizard/" 
ProxyPassReverse "/te-creation-wizard/" "http://cpmaster.internal.example.com:32080/te-creation-wizard/"

Activities Plus

After setting up Activities Plus see Set up Activities Plus and add the following rules to your httpd.conf on your IBM HTTP servers and restart the service:

# proxy rules for activities plus 
RewriteRule ^/activities/service/html/(.*)$ /boards/activities/service/html/$1 [R] 
ProxyPass "/boards" "http://cpmaster.internal.example.com:32080/boards" 
ProxyPassReverse "/boards" "http://cpmaster.internal.example.com:32080/boards" 
ProxyPass "/api-boards" "http://cpmaster.internal.example.com:32080/api-boards" 
ProxyPassReverse "/api-boards" http://cpmaster.internal.example.com:32080/api-boards"

Starting with Connections 7, be sure that you have websockets enabled on your front proxy server.

Microsoft Outlook add-in

After setting up the Connections add-in for Microsoft Outlook see Set up Connections add-in for Microsoft Outlook and add the following rules to httpd.conf for your IBM HTTP servers and restart the service:

# proxy rules for outlook add-in
Redirect "/outlook-addin" "/outlook-addin/" 
ProxyPass "/outlook-addin/" "http://cpmaster.internal.example.com:32080/" 
ProxyPassReverse "/outlook-addin/" "http://cpmaster.internal.example.com:32080/"

# Fix for connections content loading in Outlook iframe tab. Note: combine these settings with Teams ones above if using both
Header unset Content-Security-Policy
Header always set Content-Security-Policy "frame-ancestors 'self' *.office365.com"

Parent topic: Configuring the Component Pack