I deployed wildfly 14 & Nginx on a pre-prodction server.Where Nginx is a reverse proxy. and I forced wildfly to use the ssl throught the 443 by adding a socket-binding
<socket-binding-group name="standard-sockets" default-interface="public">
...
<socket-binding name="https-external" port="443"/>
...
and I modified the http-listener
<http-listener name="default" socket-binding="http" redirect-socket="https" enable-http2="true"/>
when I scan the server for the opened ports I found this result:
80/tcp open http
443/tcp open https
445/tcp filtered microsoft-ds
8080/tcp open http-proxy
8443/tcp open https-alt
so how can I stop wildfly from listening on 8080 and 8443 whiout causing any damage and keeping the admin console accessible?
netstat -ntlpe
, paste the output here so that we can be sure what to answer.0.0.0.0:8080 && 0.0.0.0:8443
, which I suppose is the mentioned wildfly. You should instruct wildfly to bind only to the loopback device, and then have the reverse proxy bind on the loopback, and only letting nginx to bind to the public interface.