search

GeoNode / ansible-geonode

Ansible GeoNode Scripts
https://galaxy.ansible.com/GeoNode/geonode/
7 stars 21 forks source link

Add Support for HTTPS #23

Open d3netxer opened 7 years ago

d3netxer commented 7 years ago

I'm not exactly how this would be implemented. Personally I would like to have the necessary packages installed for Lets Encrypt.

and then maybe it can be configured as well, along with Auto Renewal set up?

pjdufour commented 7 years ago

Let's Encrypt added to Ansiible in 2.2.

https://docs.ansible.com/ansible/letsencrypt_module.html

jondoig commented 7 years ago

Was hoping to find this here :) I'll have a go adding it to my own ansible, with openkey from Ansible 2.3

pjdufour commented 7 years ago

Added placeholder's for Let's Encrypt to the file at:

https://github.com/GeoNode/ansible-geonode/blob/56317872c457210c2b4907d1208dcec6cc1eb97c/templates/nginx.conf.j2

It's enabled for my most recent project at https://geonode.geocenter.io.

However, fyi, there's a lot of mixing of https and http content, so HSTS is not enabled by default. A switch to 100% HTTPS will likely require an array of minor fixes in the templates, javascript, etc. (thumbnails, cdn, geoserver, etc.).