SCM-Manager can run behind any reverse proxy, but a few rules must be respected.\nThe reverse proxy should not encode slashes and the X-Forwarded-For and X-Forwarded-Host headers must be sent to\nSCM-Manager.\nIf the proxy uses a different protocol as the SCM-Manager e.g. https on proxy and http on scm-manager, the\nX-Forwarded-Proto header must be sent too.\nIf XSRF protection is enabled on the SCM-Manager server, the cookie has to be HttpOnly=false and must not be\nmodified.
For SCM-Manager to work properly, the configuration forwardHeadersEnabled has to be set to true in the config.yml.\nTo avoid timeouts due to caching in the reverse proxies, you also might want to increase the idleTimeout to a higher\nvalue, depending on the size of your repositories (you might want to start with 300000, that would be five minutes).\nSee the section about reverse proxies in SCM-Server configuration for more information.
# set required forward headers\nproxy_set_header X-Forwarded-Host $host:$server_port;\nproxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n# if https is used make sure X-Forwarded-Proto header is send\nproxy_set_header X-Forwarded-Proto $scheme;\n\n# assuming scm-manager is running on localhost at port 8080\nlocation /scm {\n proxy_pass http://scm:8080;\n}If you use VirtualHost sections, please make sure to put the directives AllowEncodedSlashes, RequestHeader,\nProxyPass, and ProxyPassReverse into the same section as the Location for SCM-Manager.
# Ensure mod_proxy and mod_proxy_http modules are loaded\nLoadModule proxy_module modules/mod_proxy.so\nLoadModule proxy_http_module modules/mod_proxy_http.so\n\n# avoid encoding of slashes\nAllowEncodedSlashes NoDecode\n\n# if https is used, make sure X-Forwarded-Proto is send\nRequestHeader set \"X-Forwarded-Proto\" expr=%{REQUEST_SCHEME}\nRequestHeader set \"X-Forwarded-SSL\" expr=%{HTTPS}\n\n# assuming scm-manager is running on localhost at port 8080\nProxyPass /scm http://localhost:8080/scm nocanon\nProxyPassReverse /scm http://localhost:8080/scm\n\n<Location /scm>\n Order allow,deny\n Allow from all\n</Location>backend scm\n # use http as proxy protocol\n mode http\n # sets X-Forwarded-For header\n option forwardfor\n # check if scm is running\n option httpchk GET /scm/api/v2\n # assuming scm-manager is running on localhost at port 8080\n server dcscm1 localhost:8080 check\n # sets X-Forwarded-Host header\n http-request set-header X-Forwarded-Host %[req.hdr(Host)]\n # sets X-Forwarded-Proto to https if ssl is enabled\n http-request set-header X-Forwarded-Proto https if { ssl_fc }