How to change the Rundeck web interface port from 4440 to 80?

1,788 views
Skip to first unread message

Mark Macdonald

unread,
Feb 29, 2016, 10:54:03 AM2/29/16
to rundeck-discuss
I'm trying to use Rundeck on Ubuntu 14.04.

How do I change the web interface port from 4440 (default) to 80?

The port number seems to be referred to in various config locations (including /etc/rundeck/profile and /etc/rundeck/framework.properties) but changing these had no effect for me and I can't find a specific section in the documentation on changing the web port.

Caleb Call

unread,
Feb 29, 2016, 11:32:08 AM2/29/16
to rundeck...@googlegroups.com
Why not just leave it on 4440 and put a proxy (http, nginx, etc) in front of it?


--
You received this message because you are subscribed to the Google Groups "rundeck-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to rundeck-discu...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/rundeck-discuss/efcbbd09-dbd6-4f07-a00d-7227a3704daa%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Alex Honor

unread,
Feb 29, 2016, 12:00:40 PM2/29/16
to rundeck-discuss
Port 80 is a privileged port which means root access. I suggest using a proxy or using port translation as an alternative to changing to a privileged port.

Mark Macdonald

unread,
Mar 1, 2016, 7:46:06 AM3/1/16
to rundeck-discuss
That could work. But why such a complication solution? It would still be helpful to have instructions on how to change the port via rundeck configuration.

(ports 80,8080, 8081 are the only ones not blocked by a firewall on my network).

Mark Macdonald

unread,
Mar 1, 2016, 7:47:47 AM3/1/16
to rundeck-discuss
Thanks. It would still be helpful to have instructions on how to change the port via rundeck configuration.

(ports 80,8080, 8081 are the only ones not blocked by a firewall on my network).

new23d

unread,
Mar 1, 2016, 11:59:27 AM3/1/16
to rundeck-discuss

Binding to port 80 on service startup is indeed a privileged operation only root can perform. Otherwise look at how Apache does it (non-Java), or look into CAP_NET_BIND_SERVICE . Easiest it to redirect with iptables...

iptables -A PREROUTING -d <your-ip>/32 -p tcp --dport 80 -j DNAT --to-destination <your-ip>:4440

The REDIRECT target may also be used, and the destination with <your-ip>/mask may be skipped altogether. Well, depends on how many interfaces you may have configured and how much of a catch-all you'd expect this rule to be. You will have to look at Ubuntu's documentation to persist this on reboots.

--
new23d
Reply all
Reply to author
Forward
0 new messages