Skip to content

Commit

Permalink
add SSL cert
Browse files Browse the repository at this point in the history
  • Loading branch information
nike-getto committed Jul 18, 2024
1 parent ed55eb1 commit c148b32
Show file tree
Hide file tree
Showing 4 changed files with 101 additions and 1 deletion.
8 changes: 7 additions & 1 deletion proxy/Dockerfile
Original file line number Diff line number Diff line change
Expand Up @@ -5,4 +5,10 @@ FROM nginx:latest
COPY nginx.conf /etc/nginx/nginx.conf

# Copy password file for basic authentication
COPY .htpasswd /etc/nginx/.htpasswd
COPY .htpasswd /etc/nginx/.htpasswd

# Copy cert.pem
COPY cert.pem /etc/nginx/ssl

# Copy key.pem
COPY key.pem /etc/nginx/ssl
30 changes: 30 additions & 0 deletions proxy/cert.pem
Original file line number Diff line number Diff line change
@@ -0,0 +1,30 @@
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
52 changes: 52 additions & 0 deletions proxy/key.pem
Original file line number Diff line number Diff line change
@@ -0,0 +1,52 @@
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----
12 changes: 12 additions & 0 deletions proxy/nginx.conf
Original file line number Diff line number Diff line change
Expand Up @@ -21,6 +21,18 @@ http {
listen 80;
server_name frontend;

listen 443 ssl;

ssl_certificate /etc/nginx/ssl/cert.pem;
ssl_certificate_key /etc/nginx/ssl/key.pem;

ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m;

ssl_protocols TLSv1.2 TLSv1.3;
ssl_prefer_server_ciphers on;
ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';

location / {
auth_basic "Restricted Access";
auth_basic_user_file /etc/nginx/.htpasswd;
Expand Down

0 comments on commit c148b32

Please sign in to comment.