Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SSL for TerminusDB with Traefik and Let’s Encrypt #2070

Open
wants to merge 6 commits into
base: main
Choose a base branch
from

Conversation

alexander-mart
Copy link
Contributor

@alexander-mart alexander-mart commented Dec 24, 2023

Done

  • terminus-db dashboard
  • change-request-api

To improve

  • enable vectorlink:
docker logs 9efd97ccffa9
time="2023-12-24T21:12:32Z" level=info msg="Configuration loaded from flags."
time="2023-12-24T21:12:32Z" level=error msg="service \"vectorlink-terminusdb\" error: port is missing" providerName=docker container=vectorlink-terminusdb-a80b620d2d5ef46c35a1035b5c8f64f22628c9420fafe67ceaa8dff89f757224

@alexander-mart alexander-mart changed the title SSL fot TerminusDB with Traefik letsencrypt SSL for TerminusDB with Traefik letsencrypt Dec 24, 2023
@alexander-mart alexander-mart changed the title SSL for TerminusDB with Traefik letsencrypt SSL for TerminusDB with Traefik and Letsencrypt Dec 24, 2023
@alexander-mart alexander-mart changed the title SSL for TerminusDB with Traefik and Letsencrypt SSL for TerminusDB with Traefik and Let’s Encrypt Dec 24, 2023
@matko
Copy link
Member

matko commented Jan 10, 2024

Unfortunately, this change would break vectorlink communication as right now it relies on being able to use insecure authentication.

I created an issue in vectorlink: terminusdb-labs/vectorlink#21

@alexander-mart
Copy link
Contributor Author

@matko If I don't need vectorlink, is this configuration safe to use in production? Do you think everything else is ok?

@matko
Copy link
Member

matko commented Jan 11, 2024

@matko If I don't need vectorlink, is this configuration safe to use in production? Do you think everything else is ok?

I'm not sufficiently experienced with traefik to comment on its configuration, but focusing purely on the terminusdb part, commenting out the lines doing the insecure header forward should be sufficient to make this safe to expose online.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants