lyh1068 commented on issue #55147: URL: https://github.com/apache/airflow/issues/55147#issuecomment-3819074100
Thanks — happy to do both. To be honest, the most reliable production setup (I think) is to put a reverse proxy in front and let it manage HTTPS. Even with the CA store, if inside Docker, it won’t work properly because the certificate’s SAN will never match something like airflow‑apiserver. And although you can point the execution server URL to mydomain.com/execution, there are still cases where it needs to hairpin, which causes issues. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
