AlwaysOnSSL – A free and automated CA

Re:AlwaysOnSSL – A free and automated CA by sandGorgon on Monday March 12, 2018 @02:56AM (#16566591)

I get what you mean - i would say that not everyone has a devops team and is setting up a whole bunch of infrastructure. I would rather recommend a ssl certificate baked into a docker image (stored in a private registry) versus no https at all

even if you use a secrets management tool, there are very few (probably none) that can bootstrap a Letsencrypt api. So this new one makes that possible as well.

[ Parent | on HN ]

Re:AlwaysOnSSL – A free and automated CA by icebraining on Monday March 12, 2018 @06:51AM (#16567259)

If you want something simple, how about just installing nginx on the host to forward-proxy your Docker container?

[ Parent | on HN ]

Re:AlwaysOnSSL – A free and automated CA by sandGorgon on Monday March 12, 2018 @08:26AM (#16567694)

but how is that more secure or simpler than running a docker image ?

to setup the nginx on my host, i would still have to store the certificates somewhere right.

Docker is not what is making this thing complicated.

[ Parent | on HN ]

Re:AlwaysOnSSL – A free and automated CA by icebraining on Monday March 12, 2018 @08:41AM (#16567759)

Using nginx and a let's encrypt client on the host, the certificates are only generated and kept inside the machine itself. That's safer than baking them into the Docker image, which will be copied around.

[ Parent | on HN ]