pelias / docker

Run the Pelias geocoder in docker containers, including example projects.
MIT License
315 stars 218 forks source link

Install LetsEncrypt ssl #285

Closed ror-narola closed 2 years ago

ror-narola commented 2 years ago

I used the Cloudflare and setup the pelias docker into AWS ubuntu instance. I tried to set ssl certs into docker-compose.yml and changed the ssl ports but it was not calling the API on ssl port.

missinglink commented 2 years ago

You do not need an SSL certificate for traffic between Cloudflare and Pelias

Screenshot 2022-04-19 at 16 57 53

Select 'Flexible' from the SSL/TLS Overview page for your domain:

Screenshot 2022-04-19 at 16 58 30
ror-narola commented 2 years ago

@missinglink Thank you for your messages. Can you please give us details to set ssl port means How can we use secure port in pelias docker? As, I set 443 port instead 4000 port in the api section and it was not working but It has been working with 4000 port.

Screenshot 2022-04-21 at 11 49 15 AM

Thanks

missinglink commented 2 years ago

SSL/TLS is out-of-scope for the product and not something we would consider including/supporting.

It's not possible to change the docker-compose ports and have it support SSL, I would suggest reverting your port mapping back to the defaults.

That said there are a myriad of options out there which allow you to serve Pelias over a secure connection.

The easiest option is the one I mentioned above, your user connects to cloudflare via SSL and cloudflare proxies the Pelias API over a plain HTTP connection, it's a very simple setup.

If you'd like to try for a more advanced setup you can try using Caddy and Let's Encrypt but we certainly won't provide support for any SSL configuration in the open-source issue tracker.