Ssl with metabase jar file

Get Help
1

Hi there
I set up metabase JAR installation. My domain.com is working with SSL but when I hit url:3000 for metabase it gives me ERR_SSL_PROTOCOL_ERROR . I have set a 301 redirect in cpanel that directs domain.com to https://domain.com:3000.

{
  "browser-info": {
    "language": "en-US",
    "platform": "Win32",
    "userAgent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.74 Safari/537.36",
    "vendor": "Google Inc."
  },
  "system-info": {
    "file.encoding": "UTF-8",
    "java.runtime.name": "OpenJDK Runtime Environment",
    "java.runtime.version": "1.8.0_322-b06",
    "java.vendor": "Red Hat, Inc.",
    "java.vendor.url": "https://www.redhat.com/",
    "java.version": "1.8.0_322",
    "java.vm.name": "OpenJDK 64-Bit Server VM",
    "java.vm.version": "25.322-b06",
    "os.name": "Linux",
    "os.version": "3.10.0-1160.59.1.el7.x86_64",
    "user.language": "en",
    "user.timezone": "UTC"
  },
  "metabase-info": {
    "databases": [
      "mysql"
    ],
    "hosting-env": "unknown",
    "application-database": "h2",
    "application-database-details": {
      "database": {
        "name": "H2",
        "version": "1.4.197 (2018-03-18)"
      },
      "jdbc-driver": {
        "name": "H2 JDBC Driver",
        "version": "1.4.197 (2018-03-18)"
      }
    },
    "run-mode": "prod",
    "version": {
      "tag": "v0.42.2",
      "date": "2022-02-28",
      "branch": "release-x.42.x",
      "hash": "d6ff494"
    },
    "settings": {
      "report-timezone": "America/Chicago"
    }
  }
}
2

Hi @David_St
Since it sounds like you are using a reverse-proxy, then certificate is handled in the reverse-proxy, which should also mask the port, so it would just use :443.

Have a look here and then search the internet for how to setup Nginx with certificates:
https://www.metabase.com/docs/latest/operations-guide/running-metabase-on-debian.html

If you want to use certificate directly, which I cannot recommend, then follow this:
https://www.metabase.com/docs/latest/operations-guide/customizing-jetty-webserver.html

You should also upgrade to Java 11:
https://www.metabase.com/docs/latest/operations-guide/java-versions.html
And migrate away from H2 if you are running Metabase in production:
https://www.metabase.com/docs/latest/operations-guide/migrating-from-h2.html

3

updated java to 11 but shows still 1.8 in the diagnostic info

openjdk version "11.0.14.1" 2022-02-08 LTS
OpenJDK Runtime Environment 18.9 (build 11.0.14.1+1-LTS)
OpenJDK 64-Bit Server VM 18.9 (build 11.0.14.1+1-LTS, mixed mode, sharing)

4

@David_St Because you haven't remove the old Java 8, or haven't restarted Metabase, or is referencing the old Java binaries when starting Metabase.

Just to be clear, upgrading Java or migrating away from H2 will not fix anything related to your current problem, but will make sure you don't end up in other problems later on.

5

okay its updated to 11 now. Checking setup Nginx with certificates now

6

Sometimes at port 80 we have a few process running that causes metabase to go down with a reverse proxy nginx set up. any advise

7

@David_St I don't understand what you mean. Without logs, then it's impossible to know what is going on.
Follow the Debian article to setup Metabase as a service.

8

is there anyother laternative apart from NGINX to use as reverse proxy for metabase

9

@David_St You can use any reverse-proxy you want. Try searching the forum for other types.

10

Hi There
I did installed NGINX revese proxy over my cent OS but still the URL https: domain.com:3000 shows ERR_SSL_PROTOCOL_ERROR

please help!

11

@David_St You must have done something different compared to the articles. There should not be a public facing port 3000, since that's what the reverse-proxy would handle.

Post your Nginx config.

If you don't have experience with servers, then you should consider Metabase Cloud https://www.metabase.com/pricing/ or just use services like CloudFlare to add https.