This is some notes based on AFS installations of Tomcat - usually on RHEL6. They are not necessarily applicable if not using AFS.
See Also: SCA NGINX Configuration, Server Locations and Functions, https://github.com/slaclab/sca-resty (requires authorization)
Accounts and installations (on AFS)
...
- Local Jenkins Workspaces
- Should be safe to delete in almost all cases
- Tomcat Logs
- See `/scratch/$USER/tomcat(70|85)/logs`
- Delete old common_access, probe, and wrapper logs
Proxies (nginx)
When behind an HTTP proxy (nginx, aka resty - but also apache or firewall) - server.xml MUST be configured properly.
This means server.xml needs a RemoteIpValve configured. Below is an example for nginx (configured against 4 different nginx servers).
Tomcat MUST be restarted after doing these changes.
Code Block |
---|
<Valve className="org.apache.catalina.valves.RemoteIpValve"
internalProxies="134.79.129.91|134.79.129.92|134.79.129.11|134.79.129.13"
remoteIpHeader="x-forwarded-for"
remoteIpProxiesHeader="x-forwarded-by"
protocolHeaderHttpsValue="https"
protocolHeader="X-Forwarded-Proto" />
|