vault-secure

Vault server served behind an nginx container only available on HTTPS

Usage

1. Add SSL certificates key.pem and cert.pem to certs/ (which should be the full chained certificate including authority certificate)
2. Edit docker-compose.hostname to hostname of server (current thinking is this should be a private networked IP)
3. Run docker-compose up with optional -d

Additional Info

You can create free SSL certificates now using the letsencrypt service. To do so, run the below commands. You'll be asked to create certificates for a list of hostnames, you must ensure that DNS records have been set up that point to the machine you are creating the certificates on.

DOMAIN=[whatever domain you are creating a certificate for]
docker run -it --rm -p 443:443 -p 80:80 --name letsencrypt -v "$(pwd)/letsencrypt/etc:/etc/letsencrypt" -v "$(pwd)/letsencrypt/var/lib/:/var/lib/letsencrypt" quay.io/letsencrypt/letsencrypt:latest auth
sudo chown -R $USER:$USER letsencrypt;
mkdir -p certs;
cp letsencrypt/etc/archive/$DOMAIN/privkey1.pem certs/key.pem;
cp letsencrypt/etc/archive/$DOMAIN/fullchain1.pem certs/cert.pem;

# You are then free to remove the letsencrypt directory
rm -rf letsencrypt;