From 003c19d69022205861fdd69ce6d23b581d1e7049 Mon Sep 17 00:00:00 2001 From: Clifton Palmer Date: Fri, 28 Jul 2023 09:17:56 -0500 Subject: [PATCH 1/1] Added SSL --- docker-compose.yml | 4 ++-- proxy/nginx.conf | 10 +++++++--- 2 files changed, 9 insertions(+), 5 deletions(-) diff --git a/docker-compose.yml b/docker-compose.yml index 6e96494..13a57a4 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -17,11 +17,11 @@ services: window: 10s volumes: - ./proxy/nginx.conf:/etc/nginx/nginx.conf + - /etc/ssl/certs/purplebirdman/:/etc/ssl/certs/ environment: - NGINX_HOST=purplebirdman.com - - NGINX_PORT=80 + - NGINX_PORT=443 ports: - - 80:80 - 443:443 kanboard: image: kanboard/kanboard:v1.2.26 diff --git a/proxy/nginx.conf b/proxy/nginx.conf index 2698a6e..0bbecc2 100644 --- a/proxy/nginx.conf +++ b/proxy/nginx.conf @@ -1,13 +1,17 @@ -worker_processes 1; +worker_processes auto; events { worker_connections 1024; } http { + ssl_password_file /etc/ssl/certs/passphrase.txt; + server { - listen 80 default_server; + listen 443 ssl; server_name kanban.purplebirdman.com; + ssl_certificate /etc/ssl/certs/cert.pem; + ssl_certificate_key /etc/ssl/certs/key.pem; client_max_body_size 20M; location / { proxy_pass http://kanboard; @@ -15,7 +19,7 @@ http { } } server { - server_name public.purplebirdman.com; + server_name public.purplebirdman.com; location / { proxy_pass http://public; proxy_set_header Host $host; -- 2.47.2