geoserver / geoserver-cloud

Cloud Native GeoServer is GeoServer ready to use in the cloud through dockerized microservices.
http://geoserver.org/geoserver-cloud
Other
254 stars 78 forks source link

HTTPS support #429

Closed ppradela closed 6 months ago

ppradela commented 8 months ago

Is it possible to add an SSL certificate to webui? I was trying to host it behind nginx-proxy-manager but I am getting a warning when I am sending credentials and I am also getting bad requests (400) when I want to list enabled modules from the server info page. If someone has a guide how to add a certificate to webgui, please share it ;)

ppradela commented 8 months ago

I found a workaround for my case. I put nginx-proxy-manager in the same network and in order to go on the Geoserver settings etc. nginx-proxy-manager just forward requests directly to webui container, not through the gateway. If I want to go from outside to WMS, WMTS etc. I am routing traffic through nginx-proxy-manager and then to gateway in order to use gateway load balancing.

groldan commented 6 months ago

You can follow this guide: https://spring.io/blog/2023/06/07/securing-spring-boot-applications-with-ssl

For example, mount a ssl.yml file in the pod at /etc/geoserver/ssl.yml, and run the webui service with JAVA_OPTS=-Dspring.config.additional-location=/etc/geoserver/ssl.yml