A public facing proxy for CZNetHub applications.
- Open ports 80 and 443 on the proxy host's firewall to the subnets making connections.
- Place in the proxy host's
/opt/certs
(ownedroot:root
and mode555
):- a cert in consolidated PEM format named
ssl.pem
(ownedroot:root
and mode444
) - a corresponding secret key named
ssl.key
(ownedroot:root
and mode400
)
- a cert in consolidated PEM format named
- Customize the domains and ports in:
./nginx/etc/nginx/conf.d/*.operational
./nginx/etc/nginx/conf.d/*.maintenance
for the directives:upstream
server
server_name
- Copy
./nginx/etc/nginx/conf.d/*.operational
to./nginx/etc/nginx/conf.d/*.conf
docker-compose up -d