Added SSL

diff --git a/docker-compose.yml b/docker-compose.yml
index 6e964948707278a97241c302b3c9d0dc66774df4..13a57a47be950f4520f44e30e5e23f303d48c487 100644 (file)
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -17,11 +17,11 @@ services:
                 window: 10s
         volumes:
         - ./proxy/nginx.conf:/etc/nginx/nginx.conf
+        - /etc/ssl/certs/purplebirdman/:/etc/ssl/certs/
         environment:
         - NGINX_HOST=purplebirdman.com
-        - NGINX_PORT=80
+        - NGINX_PORT=443
         ports:
-        - 80:80
         - 443:443
     kanboard:
         image: kanboard/kanboard:v1.2.26

diff --git a/proxy/nginx.conf b/proxy/nginx.conf
index 2698a6e0d7e33b8cf3ca97a0a81b3cf6113dbb74..0bbecc251e9e066bceb09fe3c64ee1d3fb3c1283 100644 (file)
--- a/proxy/nginx.conf
+++ b/proxy/nginx.conf
@@ -1,13 +1,17 @@
-worker_processes 1;
+worker_processes auto;
 
 events {
     worker_connections 1024;
 }
 
 http {
+    ssl_password_file /etc/ssl/certs/passphrase.txt;
+
     server {
-        listen               80 default_server;
+        listen               443 ssl;
         server_name          kanban.purplebirdman.com;
+        ssl_certificate      /etc/ssl/certs/cert.pem;
+        ssl_certificate_key  /etc/ssl/certs/key.pem;
         client_max_body_size 20M;
         location / {
             proxy_pass http://kanboard;
@@ -15,7 +19,7 @@ http {
         }
     }
     server {
-        server_name public.purplebirdman.com;
+        server_name          public.purplebirdman.com;
         location / {
             proxy_pass http://public;
             proxy_set_header Host $host;