docs: add ssl setup instructions to README.md

This commit is contained in:
Rainer Killinger
2019-03-22 11:24:04 +01:00
committed by Rainer Killinger
parent b624ed3426
commit bf5eeb6a5a

View File

@@ -24,6 +24,12 @@ syntax: `127.0.0.1:3000-3500:3000` in docker-compose or docker ports configurati
port to the host's loopback on any port between 3000-3500. The proxy will see in the docker.sock which
port and ip was chosen. Internal loopback should be 127.0.0.1 tho.
For a working https configuration you need to have a valid certificate ***including the intemediate certificas without the root*** (*.crt file ) and its private key (*.key file) in two ***seperate*** files. In addition to your certificate you need to provide the certificate chain ***including*** the root certificate. [Read up on](https://medium.com/@superseb/get-your-certificate-chain-right-4b117a9c0fce) how to [create this chain](https://blog.pki.dfn.de/2015/06/ocsp-stapling-in-nginx/) (*.crt file) or ask your admins to provide you one. The final and easiest requirement of the ssl setup is to create custom Diffie-Hellman parameters in a file:
```sh
openssl dhparam -out dhparams.pem 4096
```
## Configuration (Status Codes)
Config files can be added by multiple universities (adding files like `config/default-b-tu`) and selected via the