TLS support via proxy marked as done
This commit is contained in:
@@ -98,4 +98,4 @@ Run `python ./scripts/verify-backup.py <backup-file>` after the first scheduled
|
||||
|
||||
## Production notes
|
||||
|
||||
Put this service behind a TLS reverse proxy for `eternityproject.fi` (for example Caddy or Nginx). Set a strong unique `SECRET_KEY`; the Compose file intentionally refuses to start without it. Back up the `eternity_data` Docker volume, which contains accounts and posts.
|
||||
The current deployment runs behind an Nginx reverse proxy with TLS enabled for `eternityproject.fi`. Keep `SECRET_KEY` strong and unique; the Compose file intentionally refuses to start without it. Back up the `eternity_data` Docker volume, which contains accounts and posts.
|
||||
|
||||
@@ -8,4 +8,4 @@
|
||||
- [x] Rotate the initial `admin` password and enroll its authenticator.
|
||||
- [x] Add CSRF protection to all state-changing forms.
|
||||
- [x] Add automated database backups and test restoration.
|
||||
- [ ] Configure TLS reverse proxy and production domain for `eternityproject.fi`.
|
||||
- [x] Configure TLS reverse proxy and production domain for `eternityproject.fi`.
|
||||
Reference in New Issue
Block a user