Running Zeppelin with Nginx Authentication

Running Zeppelin with Nginx Authentication

Limit the Zeppelin only allowed localhost visit.

The only thing need to pay attention to is that zeppelin is using web socket, we need use nginx to proxy that as well.

    upstream zeppelin {
       server localhost:8080;
    }
    server {
        listen       80;
        server_name  localhost;
        #charset koi8-r;
        auth_basic "Restricted Access";
        auth_basic_user_file /opt/nginx/passwd/nginx.passwd;
        #access_log  logs/host.access.log  main;
        location /zeppelin/ {
    proxy_pass http://zeppelin/;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header Host $http_host;
    proxy_set_header X-NginX-Proxy true;
    proxy_redirect off;
}
location /zeppelin/ws {
    proxy_pass http://zeppelin/ws;
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "Upgrade";
}
..snip…
}

Here is the command to generate the password files
> htpasswd -c -b /opt/nginx/passwd/nginx.passwd cloudservice password

-c is to create the file, once we have the file, we do not any it any more
> htpasswd -b /opt/nginx/passwd/nginx.passwd carl password


References:
https://sillycat.iteye.com/blog/2441250