CsteerDevops1 / wiki-framework

6 stars 0 forks source link

Сhange http to https #80

Open Esclide opened 4 years ago

Esclide commented 4 years ago

Please use let's encrypt for ssl certificate. Add force redirect from http to https. Check and validate with sslabs service.

takikokos commented 4 years ago

Screenshot from 2020-04-28 15-53-58

orasul commented 4 years ago
  1. Need to update react so it would initiate https api url.
  2. Need to fis API, right now it's not working: curl -i https://188.124.37.185:5000/api/wiki curl: (35) error:1400410B:SSL routines:CONNECT_CR_SRVR_HELLO:wrong version number
orasul commented 4 years ago

I've fixed. However there are still more points: 1) Need to add 301 redirect from http to https. 2) Need to ensure that local development environments (usually without ssl) are working fine. For the second point probably environment variable should be set and interpreted. Or something like this: https://stackoverflow.com/questions/4723213/detect-http-or-https-then-force-https-in-javascript

takikokos commented 4 years ago

added 301 redirect to https on deploy server's nginx