cockpit 웹 접속 시스템 관리 프로그램

sudo apt-get install cockpit
설치를 이렇게 하셨으면 netstat -lntp, service cockpit start 로 실행시켜줍니다.
아래처럼 정상작동되는지 확인하실수있습니다.
Cockpit은 기본적으로 9090 포트를 사용합니다.


만약 AWS,GCP,Oracle Cloud를 사용하신다면 방화벽도 따로 오픈해주셔야합니다.

접근은 ip:9090 포트로 접속하시면됩니다.
계정은 ubuntu 사용하시던거 사용하시면됩니다.

cockpit.conf 설정하기
아래 파일이 없으면 그냥생성하면됩니다.

vi /etc/cockpit/cockpit.conf

[WebService]
Origins = https://[하위도메인].[도메인] wss://[하위도메인].[도메인]
ProtocolHeader = X-Forwarded-Proto
vi /etc/nginx/sites-available/[하위도메인].[도메인]

upstream backendcockpit {
        server 127.0.0.1:9090;
        keepalive 1024;
}

server {
        listen 80 ;
        listen [::]:80 ;

        root /var/www/html;

        index index.html index.htm index.nginx-debian.html;

        server_name [하위도메인].[도메인];
        location / {
        return 301 https://[하위도메인].[도메인]$request_uri; ###### HTTPS www로 리다이렉팅
    }

}

server {
        listen 443 ssl http2;
        listen [::]:443 ssl http2;
  
        index index.php index.html index.htm index.nginx-debian.html;

        server_name [하위도메인].[도메인];
    ssl on;
    ssl_certificate /etc/letsencrypt/live/[도메인]/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/[도메인]/privkey.pem;
    ssl_trusted_certificate /etc/letsencrypt/live/[도메인]/fullchain.pem;
    ssl_dhparam /etc/ssl/certs/dhparam.pem;
    ssl_session_cache shared:SSL:1m;
    ssl_session_timeout 1440m;
    ssl_buffer_size 8k;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers 'kEECDH+ECDSA+AES128 kEECDH+ECDSA+AES256 kEECDH+AES128 kEECDH+AES256 kEDH+AES128 kEDH+AES256 DES-CB
C3-SHA +SHA !aNULL !eNULL !LOW !kECDH !DSS !MD5 !EXP !PSK !SRP !CAMELLIA !SEED';
    ssl_prefer_server_ciphers on;
    #ssl_trusted_certificate /etc/letsencrypt/live/[도메인]/chain.pem;
    ssl_stapling on;
    ssl_stapling_verify on;
        access_log  /var/log/nginx/web.access.log;
        error_log /var/log/nginx/web.error.log;

location / {
        # Required to proxy the connection to Cockpit
        proxy_pass https://127.0.0.1:9090;
        proxy_set_header Host $host;
        proxy_set_header X-Forwarded-Proto $scheme;

        # Required for web sockets to function
        proxy_http_version 1.1;
        proxy_buffering off;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";

        # Pass ETag header from Cockpit to clients.
        # See: https://github.com/cockpit-project/cockpit/issues/5239
        gzip off;
}
}
이렇게 설정해주고 service cockpit restart 와 service nginx restart 로 재시작시켜주고 
도메인으로 접근하시면 됩니다.

도메인은 당연히 cname을 설정하셨으리라 생각합니다..

이제 아래처럼 접근이 가능해집니다!