Create a doc for making an SSL-secure web host on js2

jetstream-cloud / js2docs

⚠Archived⚠ - User Facing Docs for Jetstream2 Cloud

5 stars 16 forks source link

Create a doc for making an SSL-secure web host on js2 #61

Open jlf599 opened 1 year ago

jlf599 commented 1 year ago

Since there have been several tickets recently on this, it may be good to create a doc on making an SSL-enabled gateway host on JS2

Address: -- Apache or NGINX (or both?) -- Free cert hosts (ZeroSSL or Let's Encrypt?) -- Rewriting port 80 to 443(?)

zonca commented 9 months ago

@jlf599 is anyone actively working on this? If not I can take care of it and make a pull request to this repo.

In that case I have questions:

Would you like to run the webserver natively on the host or is Docker ok?
My preference would be NGINX + Letsecrypt, can I focus on these?
Is it ok to base it off the latest Ubuntu image? (this is less of a concern if I use Docker)

jlf599 commented 9 months ago

I don't think anyone is actively working on this. I'm going to loop some support folks in for discussion here -

@zacharygraber @djhavert @jlrobiso @julianpistorius

I didn't see Le Mai to tag her.

julianpistorius commented 9 months ago

Double-checking, but I think it's fine to go ahead.

@zonca have you played with Caddy? I prefer it to NGINX + LetsEncrypt, because Caddy. Is. Just. So. Simple.

zonca commented 9 months ago

sure, Caddy looks fine with me, unless @jlf599 prefers a more traditional NGINX+Letsencrypt. So I'll need an answer to the questions below before I can get started:

Would you like to run the webserver natively on the host or is Docker ok?
Is it ok to base this on Caddy as suggested by @julianpistorius? Otherwise I can do a more traditional NGINX + Letsecrypt, it has the advantage that it is a more established technology and people might be already familiar with that, but I think it depends on what is your target audience.
Is it ok to base it off the latest Ubuntu image? (this is less of a concern if I use Docker)

jlf599 commented 9 months ago

As long as it's well documented, I trust your all's judgment on what's best to use. What we want is the lightest lift to use with the understanding that people that want to use this will NOT be sysadmins, most liktely.

I would highly recommend using the Ubuntu 22 image rather than alternatives.

zonca commented 9 months ago

very good, I'll work on this and make a pull request when I have the first draft

julianpistorius commented 9 months ago

Tagging @lemaiw