Advanced installation configuration
Lizmap behind a proxy/reverse proxy
Sometimes, some URL in Lizmap may not what you wanted. For example, there
are using the «http» protocol instead of the «https» protocol. Or it may content
an unwanted port ( http://mydomain:5468/
instead of http://mydomain/
).
Or url may not contain the real domain name.
In most of case, this is because the web server or PHP-fpm is behind a master web server (which act as a proxy or reverse proxy), and then environment parameters given by PHP or the backend web server to Lizmap are wrong.
You can tell to Lizmap to force to HTTPS, to use the right domain or to use the right port.
In localconfig.ini.php
, you can use these following configuration parameters.
To force to use the port 80 (true) or the 8080 for example with the http protocol:
forceHTTPPort = true
# or
forceHTTPPort = 8080
To force to use the port 443 (true) or the 8443 for example with the https protocol:
forceHTTPSPort = true
# or
forceHTTPSPort = 8443
To specify the domain name of your Lizmap application, if Lizmap cannot guess it:
domainName = www.example.com
If the URL path of the backend web server does not correspond to the URL path
of the frontal web server (ex: the proxy redirects urls like
http://example.com/index.php
to your web server http://backend.example.com/foo/bar/index.php
,
You have to indicate the «public» URL path (basePath) and the backend URL Path (backendBasePath):
[urlengine]
basePath= /
backendBasePath = /foo/bar
If the reverse proxy redirect HTTPS request to HTTP, you must deactivate the HTTPS check:
[urlengine]
checkHttpsOnParsing = off
Starting with Lizmap 3.0.18 and 3.1.6, you can indicate to force all generated URL with the HTTPS protocol, when Lizmap doesn’t know what is the protocol used by requests on the reverse proxy:
[urlengine]
checkHttpsOnParsing = off
forceProxyProtocol = https
Using environment variables
If some credentials or parameters are available in environment variables,
you can indicate use them into the localconfig.ini.php
or profiles.ini.php
files.
Be sure the environment variables are available to the PHP-FPM process or the APACHE/NGINX process.
Into this files, use the syntax ${VARIABLE_NAME}
.
For example, to indicate postgresql credentials stored into these variables :
LIZMAP_PGSQL_HOST=localhost
LIZMAP_PGSQL_DATABASE=lizmap
LIZMAP_PGSQL_LOGIN=admin
LIZMAP_PGSQL_PASSWORD="Sup3Rp4ssw0rd!"
You write this configuration into profiles.ini.php:
[jdb:jauth]
driver="pgsql"
database=${LIZMAP_PGSQL_DATABASE}
host=${LIZMAP_PGSQL_HOST}
user=${LIZMAP_PGSQL_LOGIN}
password=${LIZMAP_PGSQL_PASSWORD}