devlikeapro / waha

WAHA - WhatsApp HTTP API (REST API) that you can configure in a click!
https://waha.devlike.pro/
Apache License 2.0
806 stars 247 forks source link

[Feature Request] WAHA - serve https traffic #369

Closed devlikepro closed 2 weeks ago

devlikepro commented 2 weeks ago

To fix "mixed content" issue on https://waha.devlike.pro/dashboard/ we need to handle ssl on WAHA side so it's free to setup self-signed ssl

Links:

patron:PRO

devlikepro commented 2 weeks ago

Even better would be to listen by default with self-signed certificate on 3443

patron:PRO

devlikepro commented 2 weeks ago

👉 Here's Step by step guide on how to set up HTTPS for WAHA


🔒 Security

HTTPS

After you set up the security options - you should set up HTTPS to protect the data in transit and prevent Man-in-the-middle attacks.

That's fine to run it on the local network without HTTPS, but for the production environment, it's a must-have.

Environment variables

WAHA supports HTTPS out of the box.

You can set up the following environment variables to enable HTTPS:

How to set up HTTPS

Here's available options how you can set up HTTPS:

  1. Self-signed certificate - generate a self-signed certificate and use it for HTTPS.
  2. Let's Encrypt - use Certbot to get a free certificate from Let's Encrypt.
  3. Using reverse proxy - use Nginx or Apache as a reverse proxy and set up HTTPS there.

patron:PRO