taigaio / taiga-docker

Mozilla Public License 2.0
1.22k stars 305 forks source link

What additional steps to setup SSL? #24

Closed karezza closed 3 years ago

karezza commented 3 years ago

The documentation mentions:

IMPORTANT NOTICE: When you're configuring Taiga to run with HTTPS, you should configure TAIGA_URL with https and TAIGA_WEBSOCKETS_URL with wss.

What additional steps are necessary to get SSL working? . .

troubleshooting I've set: x-environment TAIGA_SITES_DOMAIN: "host.[domain]" TAIGA_SITES_SCHEME: "https" taiga-front TAIGA_URL: "https://host.[domain]" TAIGA_WEBSOCKETS_URL: "wss://host.[domain]

then

docker-compose down; docker-compose up -d

Next, enter the container taiga-docker_taiga-front_1 and modify /etc/nginx/conf.d/default with:

    listen 443 default_server;
    server_name         host.[domain];
    ssl_certificate     tls.crt;
    ssl_certificate_key tls.key;
    ssl_protocols       TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers         HIGH:!aNULL:!MD5;

and I copied over tls.crt & tls.key to:

/etc/nginx/tls.crt
/etc/nginx/tls.key

then

docker restart taiga-docker_taiga-front_1

I'm not sure what else to try.

karezza commented 3 years ago

Got this working after looking at the taiga-gateway section more closely, made the necessary changes to the taiga.conf file and added a couple volumes pointing to my certificates. Everything started right up.