aboutsummaryrefslogtreecommitdiffstats
path: root/packages/policy-gui-docker/src/main/docker/nginx/default.conf.template
diff options
context:
space:
mode:
authordanielhanrahan <daniel.hanrahan@est.tech>2021-09-08 10:49:44 +0100
committerDaniel Hanrahan <daniel.hanrahan@est.tech>2021-09-10 08:23:04 +0000
commit1f68035b96e9336b737bc9a5d055c5ffdd016813 (patch)
tree9deb894ae8e5a9b3820555e79dbb1cdd7be0b5e1 /packages/policy-gui-docker/src/main/docker/nginx/default.conf.template
parentf2047d16b47f086395856aefca6c5047b488d207 (diff)
Ensure that login in policy-gui works with AAF
Add CLAMP SSL cert and key to Docker image Change nginx port from 8080 to 2443 and enable SSL Update README to include instructions on certificate login Issue-ID: POLICY-3615 Signed-off-by: danielhanrahan <daniel.hanrahan@est.tech> Change-Id: I5211d30c420d75a94621399f33763b8156c50b5b
Diffstat (limited to 'packages/policy-gui-docker/src/main/docker/nginx/default.conf.template')
-rw-r--r--packages/policy-gui-docker/src/main/docker/nginx/default.conf.template7
1 files changed, 6 insertions, 1 deletions
diff --git a/packages/policy-gui-docker/src/main/docker/nginx/default.conf.template b/packages/policy-gui-docker/src/main/docker/nginx/default.conf.template
index d407827..9b3348a 100644
--- a/packages/policy-gui-docker/src/main/docker/nginx/default.conf.template
+++ b/packages/policy-gui-docker/src/main/docker/nginx/default.conf.template
@@ -1,5 +1,9 @@
server {
- listen 8080;
+ listen 2443 default ssl;
+ ssl_protocols TLSv1.2;
+ ssl_certificate /etc/ssl/clamp.pem;
+ ssl_certificate_key /etc/ssl/clamp.key;
+ ssl_verify_client optional_no_ca;
location / {
root /usr/share/nginx/html;
@@ -9,6 +13,7 @@ server {
location /clamp/restservices/clds/ {
proxy_pass ${CLAMP_REST_URL}/restservices/clds/;
+ proxy_set_header X-SSL-Cert $ssl_client_escaped_cert;
}
location /pdp-monitoring/papservices/monitoring/ {