searsia / searsiaserver

Federated Web Search Server
Apache License 2.0
8 stars 4 forks source link

https support #10

Closed searsia closed 6 years ago

searsia commented 7 years ago

Add support for the server to run securely using https.

almer-t commented 6 years ago

This probably is not technically challenging to implement, but providing proper certificates can be a bit of a pain. Modern browsers (rightly) warn you when accessing sites with unverifiable certificates. My suggestion is to look into https://letsencrypt.org/ for hosted solutions (e.g. that require a domain name, certificates are issued free of costs), and for testing rely on self-signed local certificates.

searsia commented 6 years ago

We no longer plan to add https support to searsiaserver directly. Instead, use your web server's configuration to forward https request to searsiaserver. An example configuration for Nginx using Let's Encrypt can be found in ths following gist: yourdomain.