Re: Enable HTTPS on pgAdmin in Server Mode

Поиск
Список
Период
Сортировка
От Morten Bonnerup Rasmussen
Тема Re: Enable HTTPS on pgAdmin in Server Mode
Дата
Msg-id GV1PR07MB89521FBDA72A80FAF171BA98E6602@GV1PR07MB8952.eurprd07.prod.outlook.com
обсуждение исходный текст
Ответ на Re: Enable HTTPS on pgAdmin in Server Mode  (Yogesh Mahajan <yogesh.mahajan@enterprisedb.com>)
Ответы Re: Enable HTTPS on pgAdmin in Server Mode  (Yogesh Mahajan <yogesh.mahajan@enterprisedb.com>)
Список pgadmin-support
Thanks for the reply, Yogesh

But you need to run a separate webserver like Apache to configure this?

When I set 'SERVER_MODE = True' in pgAdmin config, I am able to access pgAdmin from a browser by <hostname>:<port>
So I asumed that it was running an embedded webserver and was hoping to configure SSL settings directly in pgAdmin instead of having to add further complexity (webserver, reverse proxy etc).
But that is not possible?



Morten Bonnerup Rasmussen

TECH Reliability Services   /   Specialist


BESTSELLER A/S

FREDSKOVVEJ 1, 7330 BRANDE

DENMARK



From: Yogesh Mahajan <yogesh.mahajan@enterprisedb.com>
Sent: Monday, January 1, 2024 05:39
To: Morten Bonnerup Rasmussen <morten.rasmussen@bestseller.com>
Cc: pgadmin-support@lists.postgresql.org <pgadmin-support@lists.postgresql.org>
Subject: Re: Enable HTTPS on pgAdmin in Server Mode
 
You don't often get email from yogesh.mahajan@enterprisedb.com. Learn why this is important

CAUTION: This email comes from outside BESTSELLER.

Hi Morten,

You need to adjust settings with your webserver configuration to setup SSL enabled pgadmin. Here is configuration for apache webserver with SSL. 


<VirtualHost *:443>

WSGIDaemonProcess pgadmin processes=1 threads=25 python-home=/usr/pgadmin4/venv

WSGIScriptAlias / /usr/pgadmin4/web/pgAdmin4.wsgi

<Directory /usr/pgadmin4/web/>

WSGIProcessGroup pgadmin

WSGIApplicationGroup %{GLOBAL}

Require all granted

</Directory>


ServerName pgadmin.yourdomain.com

SSLEngine on

SSLCertificateFile /etc/apache2/certificate/apache-certificate.crt

SSLCertificateKeyFile /etc/apache2/certificate/apache.key


</VirtualHost>


You can mention the redirect url <https://pgadmin.yourdomain.com> for configuration above.

Thanks,
Yogesh Mahajan
EnterpriseDB


On Mon, Dec 18, 2023 at 5:43 PM Morten Bonnerup Rasmussen <morten.rasmussen@bestseller.com> wrote:
Hi

I am working on deployment of pgAdmin 4 as part of a postgreSQL package in our enterprise environment.

I have currently installed pgAdmin in server mode on a Windows Server, but running into problems configuring OAUTH2 authentication. I have enabled Azure AD/Entra ID authentication based on the following guide by Asmita

But redirect URI in Azure app registration requires a HTTPS link and I have not found a way to specify a server certificate (currently selfsigned for testing purposes).
I have not been able to find anything on config file and only references I have found online involves NGINX or similar, but I would prefer not introducing further complications if possible.
Know of any way to natively enabling HTTPS connection to pgAdmin?


Morten Bonnerup Rasmussen

TECH Reliability Services   /   Specialist

BESTSELLER A/S

FREDSKOVVEJ 1, 7330 BRANDE

DENMARK

 


Вложения

В списке pgadmin-support по дате отправления:

Предыдущее
От: Aditya Toshniwal
Дата:
Сообщение: Re: Python access to macOS keychain
Следующее
От: Daxu Yin
Дата:
Сообщение: pgAdmin4 v6.21 on RHEL7.9