Setup Bitbucket Data Center

[Anka Wirawan]

Hi,

I'm trying to install Bitbucket Data center following this link . I'm not too familiar with linux,  Please help me to answer below questions:

- which user is used to run the bitbucket server? atlbitbucket  or another non-root user?

- which user is used to run NFS service (RHEL 7)? atlbitbucket  or another non-root user?

- to communicate between server(node to NFS/ node to elasticsearch) we need setup secure connection (HTTPS) or is it ok using HTTP?

Thanks

Anka

[Tomasz Tokarczuk · Accepted solution]

Hi Anka

Thanks for posting your questions in Atlassian Community!

Regarding the first question:

"which user is used to run the bitbucket server? atlbitbucket  or another non-root user?"

by default it is  atlbitbucket . You can use any other non-root user if you wish, but if you just deploy nodes using the installer with the default configuration - it would be  atlbitbucket.

"which user is used to run NFS service (RHEL 7)? atlbitbucket  or another non-root user?" 

It might be any user, as long as the atlbitbucket (or any other user you use to run your Bitbucket node) is able to access the mounted share.

"to communicate between server(node to NFS/ node to elasticsearch) we need setup secure connection (HTTPS) or is it ok using HTTP?"

The best approach is to terminate all the users HTTPS traffic on a load balancer, and the communication between NFS share and Elasticsearch should be happening already behind the load balancer, so it doesn't need to be handled over HTTPS.

Best regards,
Tomasz Tokarczuk
Atlassian Support

[Anka Wirawan]

Great, thanks for your explanation.

[Alexis Robert · Accepted solution]

Hi @Anka Wirawan,

• just like a normal non-clustered Bitbucket installation, you should have a dedicated user running the Bitbucket service, in your case atlbitbucket is fine.
• the NFS service is run by root, so no need to have a dedicated user here.
• the NFS share are using standard ports (111 and 2049) so you don't have to setup a separate secure connection
• nodes are communicating with Hazelcast port (5701) so once again, no need for a separate secure connection.

Let me know if you have any questions, 

--Alexis

[Anka Wirawan]

Great, thanks for your explanation.