snippets of how we get rundeck behind nginx+ssl

keystore.rb

# Import the self-signed certificate from chef-server for rundeck's store
cert_alias = "#{node['fqdn']}-selfsigned-crt"
execute "import-rundeck-self-signed-cert" do
  not_if "keytool -list -keystore /etc/rundeck/ssl/truststore -storepass adminadmin | grep #{cert_alias}"
  command "keytool -import -alias #{cert_alias} -file /var/opt/chef-server/nginx/ca/*.crt -keystore /etc/rundeck/ssl/truststore -storepass adminadmin -noprompt"
  action :run
end

rundeck_startup.rb

# Hack to tell rundeck it's behind an SSL proxy instead of
# shipping an entire custom profile file
rundeck_profile = "/etc/rundeck/profile"
rundeck_jvm_proxy_on='RDECK_JVM="$RDECK_JVM -Drundeck.jetty.connector.forwarded=true -Dserver.web.context=/rundeck"'

if File.exist?(rundeck_profile) and File.readlines(rundeck_profile).grep(/jetty/).empty?
  ruby_block "add_rundeck_proxy_args" do
    block do
      file = Chef::Util::FileEdit.new(rundeck_profile)
      file.insert_line_if_no_match(rundeck_jvm_proxy_on, rundeck_jvm_proxy_on)
      file.write_file
    end
    notifies :restart, "service[rundeckd]", :delayed
  end
end