I set up a reverse proxy (currently I use Varnish/Hitch) and it
supports the certificates and all that, and then I don't have to worry
about it in the services such as GeoServer. There's the additional
benefit that Varnish is a cache, too. (Really it's designed to be a cache,
and the reverse proxy is an add on)
It keeps the functions of managing certificates and encryption separated
from the sundry various HTTP services I use. Using the proxy means you
can do things like write little Python Flask or Node services and still
have them behind HTTPS. It means you can use pretty much any Docker
HTTP service and run it behind HTTPS without having to change the Docker
image. Varnish is sort of what the ArcGIS "Web Adaptor" does but in an
open source well-documented and effective and flexible way.
My repository for Varnish and Hitch is here
https://github.com/Wildsong/docker-varnish
I think the notes are reasonably good but I wrote them for myself. If you
want support with it, write to me.
Brian Wilson
Astoria Oregon
_______________________________________________
Geoserver-users mailing list
Please make sure you read the following two resources before posting to this
list:
- Earning your support instead of buying it, but Ian Turton:
http://www.ianturton.com/talks/foss4g.html#/
- The GeoServer user list posting guidelines:
http://geoserver.org/comm/userlist-guidelines.html
If you want to request a feature or an improvement, also see this:
https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer
Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users
