docker-taiga / taiga

docker-compose.yml for simple taiga setup
215 stars 75 forks source link

SSL/TLS for taiga in dockers with Nginx #56

Closed Setplus01 closed 1 year ago

Setplus01 commented 2 years ago

I have some some_domain for taiga. I have installed taiga according to this topic. Then i 've changed some variables in docker-compose.yml: TAIGA_SITES_SCHEME: "https" TAIGA_SITES_DOMAIN: "some_domain" TAIGA_URL: "https://some_domain" TAIGA_WEBSOCKETS_URL: "wss://some_domain"

Here is my nginx config:

server {
    if ($host = some_domain) {
        return 301 https://$host$request_uri;
    } # managed by Certbot

  server_name some_domain;
  listen 80;
  location / {
    return 301 https://$host$request_uri;
  }

}
server {
  listen [::]:444 ssl; # managed by Certbot
  listen 444 ssl; # managed by Certbot
  server_name some_domain;

  access_log /var/log/tasks_services.log;
  error_log /var/log/tasks_services_error.log;
    ssl_certificate /etc/letsencrypt/live/some_domain/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/some_domain/privkey.pem; # managed by Certbot
  include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
  ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

  ssl_trusted_certificate /etc/letsencrypt/live/some_domain/chain.pem; # managed by Certbot
  ssl_stapling on; # managed by Certbot
  ssl_stapling_verify on; # managed by Certbot

  location / {
    proxy_set_header Host $http_host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Scheme $scheme;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_redirect off;
    proxy_pass http://localhost:9000/;
  }

  # Events
  location /events {
      proxy_pass http://localhost:9000/events;
      proxy_http_version 1.1;
      proxy_set_header Upgrade $http_upgrade;
      proxy_set_header Connection "upgrade";
      proxy_set_header Host $host;
      proxy_connect_timeout 7d;
      proxy_send_timeout 7d;
      proxy_read_timeout 7d;
  }

  # TLS: Configure your TLS following the best practices inside your company
  # Logs and other configurations

}

But while accessing https://some_domain in browser i have Something happened and the Taiga has captured the error to be able to work on it.

What am i doing wrong?

w1ck3dg0ph3r commented 2 years ago

Hi!

I have installed taiga according to this topic.

You probably want this official repo then.

That said, I don't see anything immediately wrong with the config, it would be best to provide some logs there, I reckon.