Help with getting a LetsEncrypt cert setup

[andrewschott]

When using the docker container, passing my LE cert in causes the browser and the app to fail miserably. Is there a trick to this? Otherwise my instance (when not using the ssl parameters) works fine.

TIA.
Andrew.

[SerChiz]

I think it's easier to use Nginx to work with SSL.

[andrewschott]

OK, figured I would ask. As of right now I am using an Apache reverse proxy and here is a config should anyone want to use it (sanitized, and on a RHEL host). Figured I would ask since it looked like there was potential native support. No worries :D

<VirtualHost *:80>
    ServerName hostname.com
    # Optional: if you ever add aliases
    # ServerAlias www.hostname.com

    Redirect permanent / https://hostname/com/
</VirtualHost>

<IfModule mod_ssl.c>
<VirtualHost *:443>
    ServerName hostname.com

    SSLEngine On
    SSLCertificateFile /etc/letsencrypt/live/hostname/fullchain.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/hostname/privkey.pem

    ProxyRequests Off
    ProxyPreserveHost On

    SSLProxyEngine On

    # Change the port accordingly, if using podman/docker to expose another port, put that below
    ProxyPass        /  https://127.0.0.1:3000/
    ProxyPassReverse /  https://127.0.0.1:3000/

    # Avoid hop-by-hop header issues
    RequestHeader unset Connection
    RequestHeader unset Upgrade
    RequestHeader unset Proxy-Connection

    ProxyTimeout 60

    ErrorLog  /var/log/httpd/haven-error.log
    CustomLog /var/log/httpd/haven-access.log combined
</VirtualHost>
</IfModule>

[EmoticonOrden]

This is working configuration? I will borrow this, if you don’t mind?

[andrewschott]

Does work, and have fun. Let me know of any improvements you may come up with. If you are content I suppose I can do a PR with this added to the docs or something.