vitalidze / traccar-web

Traccar Web UI mod
http://traccar.litvak.su/
151 stars 145 forks source link

How i can secure my traccar system? #849

Open halie412 opened 8 years ago

halie412 commented 8 years ago

hello i need to know how i can secure the traccar instalation maybe with letsencrypt i don´t know how add the credentials to traccar but i know it is possible because demo server (http://d.traccar.litvak.su/) is secured. you can help me?

vitalidze commented 8 years ago

The easiest way is to set up your SSL certificate on some mature HTTP server like nginx or apache and then configure it as a reverse proxy for traccar application.

Turbovix commented 7 years ago

Товарищ, I'm implementing SSL on my Traccar server with the configuration shown below. When I call the website www.xxxx.com, it opens without ssl, however when I call https://www.xxxx.com it opens using ssl in (/var/ www/html), can you tell me what it can be? `

``` ServerName demo.traccar.org ServerAdmin webmaster@localhost DocumentRoot /var/www/html ProxyPass /api/socket ws://localhost:8082/api/socket ProxyPassReverse /api/socket ws://localhost:8082/api/socket ProxyPass / http://localhost:8082/ ProxyPassReverse / http://localhost:8082/ SSLEngine on SSLCertificateFile /etc/ssl/certs/ssl-cert-snakeoil.pem SSLCertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key ```

`

vitalidze commented 7 years ago

I guess you need to remove DocumentRoot instruction.

Turbovix commented 7 years ago

Not resolved, even commenting the line still keeps referring to (/var/www/html).

vitalidze commented 7 years ago

Well, I don't have any other ideas. You should try googling for a way to configure your apache web server.

wolfbgn commented 7 years ago

You should put some code to force using SSL. Google it.