Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Added TLS support for nginx #79

Merged
merged 4 commits into from
Nov 13, 2020
Merged

Added TLS support for nginx #79

merged 4 commits into from
Nov 13, 2020

Conversation

fastlorenzo
Copy link
Collaborator

This PR makes nginx docker container use the certificates generated by the initial-setup.sh and enforces HTTPS on connecting to Nginx.

Fixes #78

@github-actions github-actions bot added elkserver Related to RedELK server components installer Related to RedELK installers labels Nov 1, 2020
@MarcOverIP MarcOverIP modified the milestones: v2.0.0-beta4, v2.0.0-beta.4 Nov 3, 2020
@fastlorenzo fastlorenzo closed this Nov 3, 2020
@fastlorenzo fastlorenzo deleted the nginx-tls branch November 3, 2020 16:09
@fastlorenzo fastlorenzo restored the nginx-tls branch November 3, 2020 16:10
@MarcOverIP MarcOverIP reopened this Nov 3, 2020
@fastlorenzo fastlorenzo changed the base branch from maindev to master November 6, 2020 13:50
@MarcOverIP MarcOverIP removed this from the v2.0.0-beta.4 milestone Nov 9, 2020
@fastlorenzo fastlorenzo mentioned this pull request Nov 9, 2020
Closed
@fastlorenzo
Copy link
Collaborator Author

Now supports Let's Encrypt using a sideloaded certbot container.
The installer will first run ./init-letsencrypt.sh, which will generate temporary self-signed cert for Nginx to be able to start.
It will then run the certbt container to request LE certificates. If that fails, it'll continue to use the self-signed certs.

Fixes also #101 for bloodhound container (the rest was ok)

@MarcOverIP MarcOverIP merged commit 5997881 into outflanknl:master Nov 13, 2020
@fastlorenzo fastlorenzo deleted the nginx-tls branch November 14, 2020 11:51
@fastlorenzo fastlorenzo restored the nginx-tls branch November 14, 2020 12:03
@fastlorenzo fastlorenzo deleted the nginx-tls branch November 14, 2020 12:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
elkserver Related to RedELK server components installer Related to RedELK installers
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

Add HTTPS to Nginx proxy
2 participants
@fastlorenzo @MarcOverIP