SSL Configuration

Inferno uses nginx as a reverse proxy, and it can be configured to serve Inferno with SSL.

Configuring nginx for HTTPS

In config/nginx.conf, there is a server block which starts like this:

  server {
    # ...
    listen 80;

Right below listen 80;, add the following to serve Inferno with SSL:

    listen 443 default_server ssl;

    ssl_certificate /etc/ssl/certs/inferno/inferno.crt;
    ssl_certificate_key /etc/ssl/certs/inferno/inferno.key;
    ssl_protocols TLSv1.2 TLSv1.3;

Adding Certificate to nginx

Once the nginx configuration has been updated, a certificate needs to be mounted into its docker image. In docker-compose.yml, update the volumes list to include the certificates:

  nginx:
    image: nginx
    volumes:
      - ./config/nginx.conf:/etc/nginx/nginx.conf
      # Replace LOCAL_CERT_PATH with the path to a folder containing inferno.crt
      # and inferno.key
      - LOCAL_CERT_PATH:/etc/ssl/certs/inferno:ro
    # ...