Configuring and Using SSL with the Disbatch Command Interface

Copyright (c) 2016 by Ashley Willis.

Configuring

This will run the Disbatch Command Interface on port 443 using SSL, as well as create 301 redirects for ports 80 and 8080.

• For a clean nginx deployment, copy /etc/disbatch/nginx-default.conf-example to /etc/nginx/conf.d/default.conf.

• Change the two instances of disbatch01.example.com to the host's FQDN, and change the paths for the certficate files in ssl_certificate and ssl_certificate_key to the appropriate values.

• Or run sudo /etc/disbatch/configure-nginx which works in my environment (CentOS 6) and with options should work in any.

• Restart nginx

Using the CLI

To use the disbatch.pl CLI on the same server as nginx is running, no changes are needed.

To use the CLI on another host, pass --url https://$FQDN and either --ssl_ca_file $ssl_ca_file if using a private CA, or --disable_ssl_verification to disable verification.

Alternately, if the process has read access to /etc/disbatch/config.json, it can use the same SSL settings as MongoDB.