Oracle REST Data ServicesのREST API呼び出しをカスタマイズするためにリバース・プロキシをORDSの前に配置しますが、Oracle APEXではリバース・プロキシを使った構成はサポートされていません。Oracle APEXおよびORDSの動作に問題がある場合は、リバース・プロキシを経由しない構成で事象を再現させる必要があります。
Oracle APEXの環境作成
[opc@apex-ol10 ~]$ cat /etc/yum.repos.d/oracle-epel-ol10.repo
[ol10_u1_developer_EPEL]
name=Oracle Linux $releasever.1 EPEL Packages for Development ($basearch)
baseurl=https://yum$ociregion.$ocidomain/repo/OracleLinux/OL10/1/developer/EPEL/$basearch/
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-oracle
gpgcheck=1
enabled=0
[opc@apex-ol10 ~]$
curl -O https://raw.githubusercontent.com/ujnak/mcp-app/refs/heads/main/nginx/prepare-ol10.sh
[opc@ordsmcp ~]$ sh prepare-ol10.sh
IS_ADB = false
INSTALL_APEX = true
IS_ORACLE_LINUX = true
Volume Group: ocivolume
Volume Path: /dev/ocivolume/root
Mountpoint Data
---------------
mountpoint: /
source: /dev/mapper/ocivolume-root
filesystem type: xfs
source size: 24.4G
type: lvm
size: 24.5G
physical devices: ['/dev/sda3']
physical volumes: ['/dev/sda', '/dev/sda']
partition number: ['3']
volume group name: ocivolume
volume group path: /dev/ocivolume/root
Partition dry run expansion "/dev/sda3" succeeded.
CHANGE: partition=3 start=4401152 old: size=93325312 end=97726463 new: size=205314015 end=209715166
Expanding partition /dev/sda3: Confirm? Partition expand expansion "/dev/sda3" succeeded.
update-partition set to true
FLOCK: try exec open fd 9, on failure exec exits this program
FLOCK: /dev/sda: obtained exclusive lock
resizing 3 on /dev/sda using resize_sfdisk_gpt
209715200 sectors of 512. total size=107374182400 bytes
## sfdisk --unit=S --dump /dev/sda
label: gpt
label-id: 592D6E20-A76D-4106-BF2A-5B0CACDFC8E2
device: /dev/sda
unit: sectors
first-lba: 34
last-lba: 97727250
sector-size: 512
/dev/sda1 : start= 2048, size= 204800, type=C12A7328-F81F-11D2-BA4B-00A0C93EC93B, uuid=798D431A-B0CD-4C6D-8B8D-316BC9A98166, name="EFI System Partition"
/dev/sda2 : start= 206848, size= 4194304, type=0FC63DAF-8483-4772-8E79-3D69D8477DE4, uuid=17DD7565-BDC4-432A-AB0F-CF00A38D56EB
/dev/sda3 : start= 4401152, size= 93325312, type=E6D6D379-F507-44C2-A23C-238F2A3DF928, uuid=A54AD5B4-7A44-4C39-A514-592292684FB0
padding 33 sectors for gpt secondary header
max_end=209715166 tot=209715200 pt_end=97726463 pt_start=4401152 pt_size=93325312
resize of /dev/sda returned 0.
FLOCK: /dev/sda: releasing exclusive lock
CHANGED: partition=3 start=4401152 old: size=93325312 end=97726463 new: size=205314015 end=209715166
Extending /dev/sda3 succeeded.
Device /dev/sda3 extended successfully.
Logical volume /dev/ocivolume/root extended successfully.
Upgraded:
[中略]
Installed:
[中略]
Upgraded:
python3-pyOpenSSL-25.0.0-1.el10_1.noarch
Installed:
certbot-4.2.0-1.el10_1.noarch fontawesome4-fonts-1:4.7.0-23.el10.noarch
python3-acme-4.2.0-1.el10_1.noarch python3-certbot-4.2.0-1.el10_1.noarch
python3-configargparse-1.7.5-1.el10_1.noarch python3-josepy-2.0.0-2.el10_1.noarch
python3-parsedatetime-2.6-1.el10_0.noarch python3-pyrfc3339-1.1-20.el10_0.noarch
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 264 100 264 0 0 1314 0 --:--:-- --:--:-- --:--:-- 1313
Official OpenResty Open Source Repository for RHEL 162 kB/s | 42 kB 00:00
python3-certifi.noarch 2023.05.07-6.el10_0 ol10_u1_developer_EPEL
python3-lockfile.noarch 1:0.12.2-16.el10_1 ol10_u1_developer_EPEL
python3-netifaces.x86_64 0.11.0-16.el10_1 ol10_u1_developer_EPEL
python3-pytz.noarch 2025.1-1.el10_1 ol10_u1_developer_EPEL
Last metadata expiration check: 0:00:01 ago on Wed 01 Apr 2026 02:02:26 AM GMT.
Dependencies resolved.
================================================================================================================
Package Architecture Version Repository Size
================================================================================================================
Installing:
openresty x86_64 1.29.2.3-1.el9 openresty 1.3 M
Installing dependencies:
openresty-openssl3 x86_64 3.5.5-1.el9 openresty 2.6 M
openresty-pcre2 x86_64 10.47-1.el9 openresty 558 k
openresty-zlib x86_64 1.3.2-1.el9 openresty 63 k
Transaction Summary
================================================================================================================
Install 4 Packages
Total download size: 4.5 M
Installed size: 15 M
Downloading Packages:
(1/4): openresty-1.29.2.3-1.el9.x86_64.rpm 4.7 MB/s | 1.3 MB 00:00
(2/4): openresty-zlib-1.3.2-1.el9.x86_64.rpm 4.0 MB/s | 63 kB 00:00
(3/4): openresty-pcre2-10.47-1.el9.x86_64.rpm 1.7 MB/s | 558 kB 00:00
(4/4): openresty-openssl3-3.5.5-1.el9.x86_64.rpm 7.6 MB/s | 2.6 MB 00:00
----------------------------------------------------------------------------------------------------------------
Total 13 MB/s | 4.5 MB 00:00
Official OpenResty Open Source Repository for RHEL 14 kB/s | 1.7 kB 00:00
Importing GPG key 0x9F4696A1:
Userid : "Yichun Zhang <yichun@openresty.com>"
Fingerprint: 4B35 DCD2 EA45 C4E0 7831 35BC 8094 BE9C 9F46 96A1
From : https://openresty.org/package/pubkey2.gpg
Key imported successfully
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
Preparing : 1/1
Installing : openresty-zlib-1.3.2-1.el9.x86_64 1/4
Installing : openresty-openssl3-3.5.5-1.el9.x86_64 2/4
Installing : openresty-pcre2-10.47-1.el9.x86_64 3/4
Installing : openresty-1.29.2.3-1.el9.x86_64 4/4
Running scriptlet: openresty-1.29.2.3-1.el9.x86_64 4/4
Installed:
openresty-1.29.2.3-1.el9.x86_64 openresty-openssl3-3.5.5-1.el9.x86_64 openresty-pcre2-10.47-1.el9.x86_64
openresty-zlib-1.3.2-1.el9.x86_64
Complete!
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 1606 100 1606 0 0 21326 0 --:--:-- --:--:-- --:--:-- 21702
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 774 100 774 0 0 9255 0 --:--:-- --:--:-- --:--:-- 9325
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 81 100 81 0 0 958 0 --:--:-- --:--:-- --:--:-- 964
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 202 100 202 0 0 2836 0 --:--:-- --:--:-- --:--:-- 2845
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 1655 100 1655 0 0 24708 0 --:--:-- --:--:-- --:--:-- 25075
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 1994 100 1994 0 0 30820 0 --:--:-- --:--:-- --:--:-- 31156
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 436 100 436 0 0 6860 0 --:--:-- --:--:-- --:--:-- 6920
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 321 100 321 0 0 5439 0 --:--:-- --:--:-- --:--:-- 5534
Relabeled /etc/nginx from unconfined_u:object_r:etc_t:s0 to unconfined_u:object_r:httpd_config_t:s0
Relabeled /etc/nginx/conf.d from unconfined_u:object_r:etc_t:s0 to unconfined_u:object_r:httpd_config_t:s0
Relabeled /etc/nginx/conf.d/01-server.conf from unconfined_u:object_r:etc_t:s0 to unconfined_u:object_r:httpd_config_t:s0
Relabeled /etc/nginx/default.d from unconfined_u:object_r:etc_t:s0 to unconfined_u:object_r:httpd_config_t:s0
Relabeled /etc/nginx/default.d/10-root.conf from unconfined_u:object_r:etc_t:s0 to unconfined_u:object_r:httpd_config_t:s0
Relabeled /etc/nginx/default.d/90-error.conf from unconfined_u:object_r:etc_t:s0 to unconfined_u:object_r:httpd_config_t:s0
Relabeled /etc/nginx/default.d/30-mcp.conf from unconfined_u:object_r:etc_t:s0 to unconfined_u:object_r:httpd_config_t:s0
Relabeled /etc/nginx/default.d/40-www-auth.conf from unconfined_u:object_r:etc_t:s0 to unconfined_u:object_r:httpd_config_t:s0
Relabeled /etc/nginx/default.d/50-ords.conf from unconfined_u:object_r:etc_t:s0 to unconfined_u:object_r:httpd_config_t:s0
Relabeled /etc/nginx/default.d/60-apex-static-files.conf from unconfined_u:object_r:etc_t:s0 to unconfined_u:object_r:httpd_config_t:s0
success
success
success
success
success
success
success
success
public (default, active)
target: default
ingress-priority: 0
egress-priority: 0
icmp-block-inversion: no
interfaces: enp0s5
sources:
services: dhcpv6-client http https ssh
ports: 8080/tcp 8443/tcp 27017/tcp 1521/tcp 1522/tcp
protocols:
forward: yes
masquerade: no
forward-ports:
source-ports:
icmp-blocks:
rich rules:
* Applying /usr/lib/sysctl.d/01-unprivileged-bpf.conf ...
* Applying /usr/lib/sysctl.d/10-default-yama-scope.conf ...
* Applying /usr/lib/sysctl.d/10-map-count.conf ...
* Applying /usr/lib/sysctl.d/50-coredump.conf ...
* Applying /usr/lib/sysctl.d/50-default.conf ...
* Applying /usr/lib/sysctl.d/50-libkcapi-optmem_max.conf ...
* Applying /usr/lib/sysctl.d/50-pid-max.conf ...
* Applying /usr/lib/sysctl.d/50-redhat.conf ...
* Applying /usr/lib/sysctl.d/50-scsi-logging.conf ...
* Applying /etc/sysctl.d/60-disable-ipv6.conf ...
* Applying /etc/sysctl.d/99-sysctl.conf ...
* Applying /etc/sysctl.conf ...
[中略]
Installed:
aardvark-dns-2:1.16.0-2.el10.x86_64 buildah-2:1.41.8-2.0.1.el10_1.x86_64
catatonit-5:0.2.1-1.el10.x86_64 cockpit-bridge-344-1.0.1.el10.noarch
cockpit-podman-111-1.el10.noarch conmon-3:2.1.13-1.el10.x86_64
container-selinux-4:2.240.0-1.el10.noarch container-tools-1-16.0.1.el10.noarch
containers-common-5:0.64.0-5.0.1.el10_1.noarch containers-common-extra-5:0.64.0-5.0.1.el10_1.noarch
criu-4.1-1.el10.x86_64 criu-libs-4.1-1.el10.x86_64
crun-1.23.1-1.el10_0.x86_64 fuse-overlayfs-1.16-1.el10_1.x86_64
libnet-1.3-7.el10.x86_64 libslirp-4.7.0-10.el10.x86_64
netavark-2:1.16.0-1.el10.x86_64 passt-0^20250512.g8ec1341-4.el10_1.x86_64
passt-selinux-0^20250512.g8ec1341-4.el10_1.noarch podman-7:5.6.0-12.0.1.el10_1.x86_64
podman-docker-7:5.6.0-12.0.1.el10_1.noarch python3-podman-3:5.5.0-1.el10.noarch
shadow-utils-subid-2:4.15.0-10.el10_1.x86_64 skopeo-2:1.20.0-3.el10_1.x86_64
slirp4netns-1.3.3-1.el10.x86_64 udica-0.2.8-6.el10.noarch
unzip-6.0-69.el10.x86_64
[opc@ordsmcp ~]$
[opc@ordsmcp ~]$ sudo shutdown -r now
Broadcast message from root@localhost.localdomain on pts/1 (Fri 2026-02-20 02:33:58 GMT):
The system will reboot now!
スクリプト内で作成しているユーザーoracleに切り替えて作業します。
sudo su - oracle
[opc@ordsmcp ~]$ sudo su - oracle
[oracle@ordsmcp ~]$
Oracle APEXの最新のアーカイブをダウンロードし解凍します。その他に、データファイルを保管するディレクトリoradataと、ORDSの構成ファイルを保管するディレクトリords_configを作成します。
[oracle@ordsmcp ~]$ curl -OL https://download.oracle.com/otn_software/apex/apex-latest.zip
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 289M 100 289M 0 0 126M 0 0:00:02 0:00:02 --:--:-- 126M
[oracle@ordsmcp ~]$ unzip -q apex-latest.zip
[oracle@ordsmcp ~]$ mkdir oradata
[oracle@ordsmcp ~]$ mkdir ords_config
[oracle@ordsmcp ~]$
[oracle@ordsmcp ~]$ podman pull container-registry.oracle.com/database/free:latest
Trying to pull container-registry.oracle.com/database/free:latest...
Getting image source signatures
Copying blob 8b259ba4c4d9 done |
Copying blob 3bf32880b451 done |
Copying blob 41fec24cd635 done |
Copying blob 422548fea3d3 done |
Copying blob 2194ce8eea01 done |
Copying blob ec2d2b9967e0 done |
Copying blob 76262a11b33d done |
Copying blob 1b5d06dc2c49 done |
Copying blob 991ed18434dd done |
Copying blob f25c6654bf3b done |
Copying blob ea29ae69235f done |
Copying blob 3a95ca5b8cd0 done |
Copying blob d46a44facb7d done |
Copying blob cc817f3645bb done |
Copying blob 45768b398726 done |
Copying blob 7e9be3b296e9 done |
Copying blob e02d6fb066f3 done |
Copying blob 2d032c198665 done |
Copying blob 8a5b38f9ede2 done |
Copying blob da072ef4f3b2 done |
Copying blob aeed28bf05ac done |
Copying blob 29c59e2aad04 done |
Copying config 7c044a242a done |
Writing manifest to image destination
7c044a242a1c6b1d7f0d6bcf145a96b1dc5265d4d9610c70302ece0d067cf670
[oracle@ordsmcp ~]$ podman pull container-registry.oracle.com/database/ords:latest
Trying to pull container-registry.oracle.com/database/ords:latest...
Getting image source signatures
Copying blob ac06ceafe5b9 done |
Copying blob 0c76fee24ccd done |
Copying blob 7199b16c8c4a done |
Copying blob 4577ec524291 done |
Copying blob 2d59a8c44230 done |
Copying blob a1247073a683 done |
Copying blob b91daf9676e0 done |
Copying blob 4f4fb700ef54 done |
Copying config 3f853d6c8f done |
Writing manifest to image destination
3f853d6c8ffd32021b3154789d719170e3d5c3b61b48ac5d703281a67ba7d8fe
[oracle@ordsmcp ~]$
更新した構成ファイルから、一気にポッドapexを作成します。
sed -i 's/$ORASYSPWD/[パスワード]/g' apex.yml
[oracle@ordsmcp ~]$ sed -i 's/$ORASYSPWD/********/g' apex.yml
[oracle@ordsmcp ~]$ podman play kube apex.yml
Pod:
baa73eca2cb117f0447d5ee80e926860364e0369f6639fbfbc7dc3f3e5e54759
Containers:
6f161d69b2b40a07a2f156ac0e26de29506c39f99cc507461bf26f7d5bbfe002
dc649dccf7ed0275c93422cf6c1a8164c7b2dcd5535008039ec89a83039030c6
[oracle@ordsmcp ~]$
最初はデータベースの起動をコンテナのログから確認します。DATABASE IS READY TO USE!と表示されれば、データベースの起動は完了です。データベースが起動されると、ORDSの構成が始まります。
[oracle@ordsmcp ~]$ podman logs -f apex-db
Specify a password to be used for database accounts. Oracle recommends that the password entered should be at least 8 characters in length, contain at least 1 uppercase character, 1 lower case character and 1 digit [0-9]. Note that the same password will be used for SYS, SYSTEM and PDBADMIN accounts:
Confirm the password:
Configuring Oracle Listener.
Listener configuration succeeded.
Configuring Oracle AI Database FREE.
Enter SYS user password:
*******
Enter SYSTEM user password:
*******
Enter PDBADMIN User Password:
*****
Prepare for db operation
7% complete
Copying database files
29% complete
Creating and starting Oracle instance
30% complete
33% complete
[中略]
The Oracle base remains unchanged with value /opt/oracle
#########################
DATABASE IS READY TO USE!
#########################
The following output is now a tail of the alert.log:
2026-04-01T02:22:50.303403+00:00
CLID: P
PDB$SEED(2):Autotune of undo retention is turned on.
2026-04-01T02:22:50.664241+00:00
[oracle@ordsmcp ~]$ podman logs -f apex-ords
Testing database connection...
INFO : Attempt 1: Connecting to sys/*****@localhost:1521/freepdb1 as sysdba...
INFO : Database not ready (attempt 1 of 60). Retrying in 10s...
INFO : Attempt 2: Connecting to sys/*****@localhost:1521/freepdb1 as sysdba...
INFO : Database not ready (attempt 2 of 60). Retrying in 10s...
INFO : Attempt 3: Connecting to sys/*****@localhost:1521/freepdb1 as sysdba...
INFO : Database not ready (attempt 3 of 60). Retrying in 10s...
INFO : Attempt 4: Connecting to sys/*****@localhost:1521/freepdb1 as sysdba...
[中略]
2026-02-19T13:36:50.579Z WARNING *** jdbc.MaxLimit in configuration |default|lo| is using a value of 10, this setting may not be sized adequately for a production environment ***
2026-02-19T13:36:50.831Z INFO Created Pool: |default|lo|-2026-02-19T13-36-49.967118441Z at: 2026-02-19T13:36:49.967118441Z
2026-02-19T13:36:50.950Z INFO
Mapped local pools from /etc/ords/config/databases:
/ords/ => default => VALID
2026-02-19T13:36:50.960Z INFO Oracle REST Data Services initialized
Oracle REST Data Services version : 25.4.0.r3641739
Oracle REST Data Services server info: jetty/12.0.25
Oracle REST Data Services java info: Java HotSpot(TM) 64-Bit Server VM GraalVM EE 21.3.10 (build 17.0.11+7-LTS-jvmci-21.3-b51 mixed mode, sharing)
2026-02-19T13:36:51.050Z INFO CursorMonitor 1
2026-02-19T13:36:51.050Z INFO RequestMonitor 1
2026-02-19T13:36:51.051Z INFO TransactionMonitor 1
2026-02-19T13:36:51.051Z INFO AccessLogMonitor 1 0
2026-02-19T13:36:51.052Z INFO WatchdogMonitor 1
^C[oracle@ordsmcp ~]$
podman exec -it apex-db bash
cd ~/apex
[oracle@ordsmcp ~]$ podman exec -it apex-db bash
bash-4.4$ cd ~/apex
bash-4.4$
export NLS_LANG=American_America.AL32UTF8
sqlplus / as sysdba
alter session set container = freepdb1;
bash-4.4$ export NLS_LANG=American_America.AL32UTF8
bash-4.4$ sqlplus / as sysdba
SQL*Plus: Release 23.26.1.0.0 - Production on Thu Feb 19 13:50:49 2026
Version 23.26.1.0.0
Copyright (c) 1982, 2025, Oracle. All rights reserved.
Connected to:
Oracle AI Database 26ai Free Release 23.26.1.0.0 - Develop, Learn, and Run for Free
Version 23.26.1.0.0
SQL> alter session set container = freepdb1;
Session altered.
SQL>
@load_trans JAPANESE
SQL> @load_trans JAPANESE
PL/SQL procedure successfully completed.
Installing Oracle APEX translation - JAPANESE
. ORACLE
.
. Oracle APEX Hosted Development Service Installation.
..............................................................
PL/SQL procedure successfully completed.
PL/SQL procedure successfully completed.
--application/set_environment
API Last Extended:20241130
Your Current Version:20241130
This import is compatible with version: 20241130
COMPATIBLE (You should be able to run this import without issues.)
ID offset during import: 0
New ID offset for application: 0
APPLICATION 4420 - Oracle APEX Builder, Wizard Messages and Native Plug-Ins
--application/delete_application
--application/create_application
--application/user_interfaces
--application/shared_components/navigation/lists/spotlight_custom_entries_global
--application/shared_components/navigation/lists/spotlight_custom_entries_app_level
[中略]
--application/pages/page_00203
--application/pages/page_00204
--application/pages/page_00205
--application/pages/page_00206
--application/deployment/definition
--application/deployment/checks
--application/deployment/buildoptions
--application/end_environment
... elapsed: 2.37 sec
...done
Adjust instance settings
PL/SQL procedure successfully completed.
SQL>
@apxchpwd
SQL> @apxchpwd
...set_appun.sql
================================================================================
This script can be used to change the password of an Oracle APEX
instance administrator. If the user does not yet exist, a user record will be
created.
================================================================================
Enter the administrator's username [ADMIN]
User "ADMIN" does not yet exist and will be created.
Enter ADMIN's email [ADMIN]
Enter ADMIN's password [] ********
Created instance administrator ADMIN.
SQL> exit
Disconnected from Oracle AI Database 26ai Free Release 23.26.1.0.0 - Develop, Learn, and Run for Free
Version 23.26.1.0.0
bash-4.4$ exit
exit
[oracle@ordsmcp ~]$
以上で、Oracle APEXの管理サービスに、日本語でサインインできるようになりました。
OpenRestyによるリバース・プロキシの構成
sudo -s
[opc@ordsmcp ~]$ sudo -s
[root@ordsmcp opc]# cd ~
[root@ordsmcp ~]#
以下の例ではホスト名にords.example.comを指定していますが、作業の際には割り当てているホスト名に置き換えます。
certbot certonly --standalone -d ホスト名
[root@ordsmcp ~]# certbot certonly --standalone -d ords.example.com
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Enter email address or hit Enter to skip.
(Enter 'c' to cancel): メール・アドレス
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Please read the Terms of Service at:
https://letsencrypt.org/documents/LE-SA-v1.6-August-18-2025.pdf
You must agree in order to register with the ACME server. Do you agree?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
(Y)es/(N)o: Y
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Would you be willing, once your first certificate is successfully issued, to
share your email address with the Electronic Frontier Foundation, a founding
partner of the Let's Encrypt project and the non-profit organization that
develops Certbot? We'd like to send you email about our work encrypting the web,
EFF news, campaigns, and ways to support digital freedom.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
(Y)es/(N)o: N
Account registered.
Requesting a certificate for ords.example.com
Successfully received certificate.
Certificate is saved at: /etc/letsencrypt/live/ords.example.com/fullchain.pem
Key is saved at: /etc/letsencrypt/live/ords.example.com/privkey.pem
This certificate expires on 2026-05-21.
These files will be updated when the certificate renews.
Certbot has set up a scheduled task to automatically renew this certificate in the background.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
If you like Certbot, please consider supporting our work by:
* Donating to ISRG / Let's Encrypt: https://letsencrypt.org/donate
* Donating to EFF: https://eff.org/donate-le
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
[root@ordsmcp ~]#
OpenResty（nginx）ではhttpsからhttpへのリバース・プロキシを構成するため、Oracle REST Data Servicesのsecurity.httpsHeaderCheckに"X-Forwarded-Proto: https"を設定します。
ユーザーoracleに切り替えコンテナapex-ordsに接続して、ordsコマンドを実行します。
su - oracle
podman exec apex-ords ords --config /etc/ords/config config set security.httpsHeaderCheck "X-Forwarded-Proto: https"
[root@ordsmcp ~]# su - oracle
Last login: Fri Feb 20 07:23:57 GMT 2026 on pts/1
[oracle@ordsmcp ~]$ podman exec apex-ords ords --config /etc/ords/config config set security.httpsHeaderCheck "X-Forwarded-Proto: https"
ORDS: Release 25.4 Production on Fri Feb 20 08:23:34 2026
Copyright (c) 2010, 2026, Oracle.
Configuration:
/etc/ords/config
The global setting named: security.httpsHeaderCheck was set to: X-Forwarded-Proto: https
[oracle@ordsmcp ~]$ podman restart apex-ords
WARN[0010] StopSignal SIGTERM failed to stop container apex-ords in 10 seconds, resorting to SIGKILL
apex-ords
[oracle@ordsmcp ~]$ exit
logout
[root@ordsmcp ~]#
[root@ordsmcp ~]# sed -i 's/ords.example.com/********/g' /etc/nginx/conf.d/01-server.conf
[root@ordsmcp ~]# systemctl enable openresty
Created symlink '/etc/systemd/system/multi-user.target.wants/openresty.service' → '/usr/lib/systemd/system/openresty.service'.
[root@ordsmcp ~]# systemctl start openresty
[root@ordsmcp ~]#
