pouchdb / pouchdb-server

CouchDB-compatible server built on PouchDB and Node
Apache License 2.0
944 stars 155 forks source link

HTTPS / SSL support in built-in httpd? #440

Open Offbeatmammal opened 3 years ago

Offbeatmammal commented 3 years ago

I saw back in 2018 in #169 that there were (at that point) no plans to enable native SSL support in pouchdb-server, but that was before the move by most browsers to actively block insecure requests from secure pages which makes something like

var remoteDB = new PouchDB('https://my.server.com:6984/database')
localDB.sync(remoteDB, {
....

a little harder without extra steps.

As httpd supports SSL and it appears pouchdb is sitting on top of that, is it possible to add support for the [SSL] configuration (or is there a trivial solution for doing this on a Windows/IIS combination that I'm missing which negates the need for this)?

Offbeatmammal commented 3 years ago

FWIW, found a way to address this using IIS - https://medium.com/@gusterwoei/how-to-configure-reverse-proxy-on-windows-iis-52a48b90163a

eklem commented 9 months ago

You should use a reverse proxy for this? Let pouchdb-server run on http and only accept connections on 127.0.0.1 / localhost.