Enable https on the danse server

[butlerpd]

The Danse server needs to have a trusted certificate and https enabled. Browsers are getting increasingly wary of non https sites. There are many services, not all SasView using the server, but the SasView marketplace is one that does for example. So does the old trac site. There may be more? Further, UTK which hosts the machines is cracking down on security issues.

Note that there are services that allow the obtaining of the HTTPS certificate for free. See for example:
https://linuxize.com/post/secure-nginx-with-let-s-encrypt-on-ubuntu-18-04/

besides the certificate it will need to be linked to the apache web server we are using.

[bmaranville]

There is some kind of weird rate limit on certificates from let's encrypt, so if you have more than 5 sites you want to cover with one cert, it may take time. https://community.letsencrypt.org/t/maximum-number-of-sites-on-one-certificate/10634

[butlerpd]

That should not be a problem from what I can tell. However the link at the top was for nginx. This gives the instructions for using certbot to automate the install and renewal using the Apache web server and Ubuntu 20.04 LTS (danse 2)
https://www.digitalocean.com/community/tutorials/how-to-secure-apache-with-let-s-encrypt-on-ubuntu-20-04

[butlerpd]

Current status:

• NOTE: the main www website is hosted on github under github.io and has already had https enforced. However, the sphinx documentation has to be served from a different repo because of conflicts with using jekyll. That repo has now also been set to enforce https as part of resolving this issue.
• danse2 is now set up with a certificat from let-s-encrypt with auto renew
• new.smallangles.net is currently the only service registered.
• As soon as @krzywon finishes with his work on the marketplace and @butlerpd finishes with the canSAS services move to danse2 those will be added to the certificate.

At that point we should consider this ticket closed. I don't think we should try to add https certification to dans1 which is still running lts 14! Instead we should be executing on the server upgrade project described in issue SasView/sasmeta#7 and in particular for this topic under phase II of the wiki pages for upgrading our servers by moving all services off of danse which can then have new drives installed and be upgraded to the latest Ubuntu.

[lucas-wilkins]

"At that point we should consider this ticket closed." ---->