[stork-users] Stork Webserver HTTPS

[Slawek Figiel]

Hello Cody!

There are two possible ways to configure HTTPS in the Stork server:

The first is configuring the reverse proxy, as Kevin and Justin mentioned.

The second is specifying the TLS certificate using the 
`--rest-tls-certificate`, `--rest-tls-key`, and `--rest-tls-ca` CLI 
parameters (or corresponding environment variables). It is described in 
the Stork ARM: https://stork.readthedocs.io/en/latest/install.html#setup .

Regards,
Slawek Figiel

On 18/10/2023 17:17, Justin Krejci wrote:
> That is exactly what I did.
> 
> 
> On my Ubuntu server I installed nginx with the belowsite config file, 
> obviously replace $SERVER_IP with your own server address. Then also 
> fill in your HTTPS key/cert files.
> 
> 
> 
> server {
>          listen 80 default_server;
>          listen [::]:80 default_server;
>          listen 443 ssl default_server;
>          listen [::]:443 ssl default_server;
>          ssl_certificate /etc/nginx/ssl/cert.pem;
>          ssl_certificate_key /etc/nginx/ssl/key.pem;
>          ssl_dhparam /etc/nginx/ssl/dhparam.pem;
>          root /var/www/html;
>          index index.html index.htm index.nginx-debian.html;
>          server_name _;
>          location / {
>                  proxy_pass http://*$SERVER_IP*:8080;
>          }
> }
> 
> 
> 
> ------------------------------------------------------------------------
> *From:* Stork-users <stork-users-bounces at lists.isc.org> on behalf of 
> Kevin P. Fleming <lists.stork-users at kevin.km6g.us>
> *Sent:* Wednesday, October 18, 2023 10:05 AM
> *To:* stork-users at lists.isc.org
> *Subject:* Re: [stork-users] Stork Webserver HTTPS
> On Wed, Oct 18, 2023, at 10:56, Cody Shultz wrote:
>>
>> Hello,
>>
>>
>>                 I couldn’t find a definitive answer in the 
>> documentation. Is there a way to enable HTTPS for the Stork management 
>> interface? Thanks!
>>
> 
> Yes, by placing an HTTPS-enabled reverse proxy in front of it :-)
>