diff --git a/README.md b/README.md index ffd0bd43..68e7538b 100644 --- a/README.md +++ b/README.md @@ -24,6 +24,12 @@ syntax: `127.0.0.1:3000-3500:3000` in docker-compose or docker ports configurati port to the host's loopback on any port between 3000-3500. The proxy will see in the docker.sock which port and ip was chosen. Internal loopback should be 127.0.0.1 tho. +For a working https configuration you need to have a valid certificate ***including the intemediate certificas without the root*** (*.crt file ) and its private key (*.key file) in two ***seperate*** files. In addition to your certificate you need to provide the certificate chain ***including*** the root certificate. [Read up on](https://medium.com/@superseb/get-your-certificate-chain-right-4b117a9c0fce) how to [create this chain](https://blog.pki.dfn.de/2015/06/ocsp-stapling-in-nginx/) (*.crt file) or ask your admins to provide you one. The final and easiest requirement of the ssl setup is to create custom Diffie-Hellman parameters in a file: + +```sh +openssl dhparam -out dhparams.pem 4096 +``` + ## Configuration (Status Codes) Config files can be added by multiple universities (adding files like `config/default-b-tu`) and selected via the