RabbitMQ is an open-source message broker that facilitates communication between distributed applications through message queuing. It supports multiple messaging protocols including AMQP, MQTT, and STOMP, and provides features such as message routing, delivery acknowledgments, and clustering for high-availability deployments.

This article explains how to install RabbitMQ on an Ubuntu 26.04 server, enable the web management interface, set up Nginx as a reverse proxy with SSL encryption, and configure firewall rules for secure access.

Prerequisites

Before you begin, you need to:

• Have access to an Ubuntu 26.04 server instance as a non-root user with sudo privileges.
• Have a domain A record pointing to the server's public IP address. For example, rabbitmq.example.com.

Install RabbitMQ

RabbitMQ and its Erlang dependency are available in the default Ubuntu 26.04 APT repositories. The following steps install both packages and verify the installation.

1. Update the APT package index.

   console Copy

   $ sudo apt update
   

   Explain Code

2. Install the Erlang runtime and the gnupg package required by RabbitMQ.

   console Copy

   $ sudo apt install gnupg erlang -y
   

   Explain Code

3. Install the RabbitMQ server.

   console Copy

   $ sudo apt install rabbitmq-server -y
   

   Explain Code

Manage the RabbitMQ System Service

The rabbitmq-server systemd service controls the RabbitMQ broker process. The following steps enable automatic startup on boot and verify the service status.

1. Enable RabbitMQ to start automatically at boot time.

   console Copy

   $ sudo systemctl enable rabbitmq-server
   

   Explain Code

2. Start the RabbitMQ service.

   console Copy

   $ sudo systemctl start rabbitmq-server
   

   Explain Code

3. Verify that RabbitMQ is active and running.

   console Copy

   $ sudo systemctl status rabbitmq-server
   

   Explain Code

   The output should display active (running), confirming that the RabbitMQ broker is operational.

Configure RabbitMQ

RabbitMQ includes a built-in management plugin that provides a web-based interface for monitoring queues, exchanges, and connections. The following steps enable the plugin and create an administrative user with full permissions.

1. Enable the RabbitMQ management plugin.

   console Copy

   $ sudo rabbitmq-plugins enable rabbitmq_management
   

   Explain Code

2. Create a new administrative user. Replace example_admin with your desired username and strong_password with a secure password.

   console Copy

   $ sudo rabbitmqctl add_user example_admin strong_password
   

   Explain Code

3. Assign the administrator tag to the user.

   console Copy

   $ sudo rabbitmqctl set_user_tags example_admin administrator
   

   Explain Code

4. Grant the user full permissions on all RabbitMQ resources.

   console Copy

   $ sudo rabbitmqctl set_permissions -p / example_admin ".*" ".*" ".*"
   

   Explain Code

   The three ".*" patterns grant configure, write, and read permissions respectively on all resources in the default virtual host.

Set Up Firewall Rules

Uncomplicated Firewall (UFW) is active by default on Ubuntu 26.04. The following steps open ports for HTTP and HTTPS traffic required by the Nginx reverse proxy.

1. Allow HTTP traffic on port 80.

   console Copy

   $ sudo ufw allow 80/tcp
   

   Explain Code

2. Allow HTTPS traffic on port 443.

   console Copy

   $ sudo ufw allow 443/tcp
   

   Explain Code

Secure RabbitMQ

The RabbitMQ management interface listens on localhost port 15672 by default. Setting up Nginx as a reverse proxy allows access through a domain name on standard HTTP/HTTPS ports. The following steps install Nginx, configure the reverse proxy, and generate a trusted SSL certificate.

Set Up Nginx as a Reverse Proxy

1. Install Nginx.

   console Copy

   $ sudo apt install nginx -y
   

   Explain Code

2. Enable Nginx to start automatically at boot time.

   console Copy

   $ sudo systemctl enable nginx
   

   Explain Code

3. Start the Nginx service.

   console Copy

   $ sudo systemctl start nginx
   

   Explain Code

4. Unlink the default Nginx virtual host configuration.

   console Copy

   $ sudo unlink /etc/nginx/sites-enabled/default
   

   Explain Code

5. Create a new Nginx virtual host configuration file. Replace rabbitmq.example.com with your actual domain.

   console Copy

   $ sudo nano /etc/nginx/sites-available/rabbitmq.conf
   

   Explain Code

6. Add the following configuration to the file. Replace rabbitmq.example.com with your actual domain.

   ini Copy

   server {
       listen 80;
       server_name rabbitmq.example.com;
   
       location / {
           proxy_pass http://127.0.0.1:15672;
           proxy_set_header Host $host;
           proxy_set_header X-Real-IP $remote_addr;
           proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           proxy_redirect off;
           proxy_http_version 1.1;
       }
   }
   

   Explain Code

   Save and close the file.

   This configuration listens on port 80 and forwards all requests to the RabbitMQ management interface running on 127.0.0.1:15672.

7. Enable the virtual host by creating a symbolic link.

   console Copy

   $ sudo ln -s /etc/nginx/sites-available/rabbitmq.conf /etc/nginx/sites-enabled/
   

   Explain Code

8. Test the Nginx configuration for syntax errors.

   console Copy

   $ sudo nginx -t
   

   Explain Code

   The output should confirm that the configuration syntax is ok and the test is successful.

9. Restart Nginx to activate the virtual host.

   console Copy

   $ sudo systemctl restart nginx
   

   Explain Code

Generate a Trusted SSL Certificate

1. Install the Certbot Let's Encrypt client and the Nginx plugin.

   console Copy

   $ sudo apt install certbot python3-certbot-nginx -y
   

   Explain Code

2. Generate an SSL certificate for your domain. Replace rabbitmq.example.com with your actual domain.

   console Copy

   $ sudo certbot --nginx -d rabbitmq.example.com --agree-tos
   

   Explain Code

   Follow the on-screen prompts to complete the certificate generation. Certbot automatically updates the Nginx configuration to enable HTTPS.

Access the RabbitMQ Console

The RabbitMQ management interface is now accessible through your domain over HTTPS.

1. Open a web browser and navigate to your domain. Replace rabbitmq.example.com with your actual domain.

   https://rabbitmq.example.com

2. Enter the administrative username and password you created earlier to log in.

3. Click Nodes in the navigation bar to view broker statistics including memory usage, message rates, and connection counts.

Conclusion

You have installed RabbitMQ on an Ubuntu 26.04 server, enabled the web management interface, and secured it with Nginx as a reverse proxy and a trusted Let's Encrypt SSL certificate. RabbitMQ supports clustering and federation for scaling message throughput across multiple nodes. For more information, refer to the official RabbitMQ documentation.