Switch to SSL - Githubissues

arg-tech / deployment-templates

0 stars 0 forks source link

Switch to SSL #4

Closed zvonimir-delas closed 3 months ago

zvonimir-delas commented 4 months ago

Will likely be a wildcard certificate, but need to check if that would work if amfws subdomain was used across servers
DTS will close port 80 so won't be able to do auto renewals with HTTP-01 checks
Nick is the DNS provider so might be able to automate renewals via DNS checks

zvonimir-delas commented 3 months ago

Done! SSL with self-signed certs between the proxy and the server, expire in 100 years. SSL from proxy to client we don't care about as much, and DTS doesn't care.