Added SSL

diff --git a/docker-compose.yml b/docker-compose.yml
index 6e964948707278a97241c302b3c9d0dc66774df4..13a57a47be950f4520f44e30e5e23f303d48c487 100644 (file)
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -17,11 +17,11 @@ services:
                 window: 10s
         volumes:
         - ./proxy/nginx.conf:/etc/nginx/nginx.conf
                 window: 10s
         volumes:
         - ./proxy/nginx.conf:/etc/nginx/nginx.conf

+        - /etc/ssl/certs/purplebirdman/:/etc/ssl/certs/

         environment:
         - NGINX_HOST=purplebirdman.com
         environment:
         - NGINX_HOST=purplebirdman.com

-        - NGINX_PORT=80
+        - NGINX_PORT=443

         ports:
         ports:

-        - 80:80

         - 443:443
     kanboard:
         image: kanboard/kanboard:v1.2.26
         - 443:443
     kanboard:
         image: kanboard/kanboard:v1.2.26

diff --git a/proxy/nginx.conf b/proxy/nginx.conf
index 2698a6e0d7e33b8cf3ca97a0a81b3cf6113dbb74..0bbecc251e9e066bceb09fe3c64ee1d3fb3c1283 100644 (file)
--- a/proxy/nginx.conf
+++ b/proxy/nginx.conf
@@ -1,13 +1,17 @@
-worker_processes 1;
+worker_processes auto;

 
 events {
     worker_connections 1024;
 }
 
 http {
 
 events {
     worker_connections 1024;
 }
 
 http {

+    ssl_password_file /etc/ssl/certs/passphrase.txt;
+

     server {
     server {

-        listen               80 default_server;
+        listen               443 ssl;

         server_name          kanban.purplebirdman.com;
         server_name          kanban.purplebirdman.com;

+        ssl_certificate      /etc/ssl/certs/cert.pem;
+        ssl_certificate_key  /etc/ssl/certs/key.pem;

         client_max_body_size 20M;
         location / {
             proxy_pass http://kanboard;
         client_max_body_size 20M;
         location / {
             proxy_pass http://kanboard;


@@ -15,7 +19,7 @@ http {
         }
     }
     server {
         }
     }
     server {

-        server_name public.purplebirdman.com;
+        server_name          public.purplebirdman.com;

         location / {
             proxy_pass http://public;
             proxy_set_header Host $host;
         location / {
             proxy_pass http://public;
             proxy_set_header Host $host;