look into https - Githubissues

jrheard / rask

overengineered personalized-to-me taskwarrior replacement

MIT License

0 stars 0 forks source link

Closed jrheard closed 3 years ago

jrheard commented 3 years ago

how do i set up tls? do i want to? do rust http clients have good support for it?

how do i set up hsts?

how do i make sure that i don't forget to renew certificates?

jrheard commented 3 years ago

this went really well.

rask.jrheard.com now exists, it points to my alb
the alb redirects http traffic to https
the alb accepts https traffic and forwards it to the target group associated with my ecs service
the cert was free and looks like it should renew automatically
rask_cli points to https://rask.jrheard.com by default
i removed the port 80 listener from the alb, so it's not possible for clients to access prod in a non-https context

aaa that went so well! hooray!