Re: [fossil-users] HOWTO: TLS-protected Fossil with nginx and Let's Encrypt

2016-06-02 Thread Joerg Sonnenberger
On Wed, Jun 01, 2016 at 10:26:17PM -0700, David Simmons wrote: > 1. The fossil website information on using nginx with fossil is not > "helpful" in that scgi had numerous problems, and ultimately serving via > proxy configuration was straightforward and reliable. This is absolutely not my experien

Re: [fossil-users] HOWTO: TLS-protected Fossil with nginx and Let's Encrypt

2016-06-01 Thread David Simmons
Warning: This post is slightly off-topic since it is about setting fossil up to not only serve via https, but do many more things to make it a complete development-team collaboration system. I just recently was setting fossil (to run on windows and linux hosted docker) to support HTTPS, servin

Re: [fossil-users] HOWTO: TLS-protected Fossil with nginx and Let's Encrypt

2016-04-14 Thread Warren Young
On Apr 14, 2016, at 3:50 PM, Joerg Sonnenberger wrote: > > On Thu, Apr 14, 2016 at 03:32:48PM -0600, Warren Young wrote: >> STEP 1: Split your “server” configurations > > I don't think this is necessary at all. It is. We want the proxy server to redirect all Fossil-over-HTTP requests to HTTPS

Re: [fossil-users] HOWTO: TLS-protected Fossil with nginx and Let's Encrypt

2016-04-14 Thread Joerg Sonnenberger
On Thu, Apr 14, 2016 at 03:32:48PM -0600, Warren Young wrote: > STEP 1: Split your “server” configurations I don't think this is necessary at all. > STEP 2: Prepare for the Let’s Encrypt challenge/response sequence This part can just statically go into the same server block, no need for a separa

[fossil-users] HOWTO: TLS-protected Fossil with nginx and Let's Encrypt

2016-04-14 Thread Warren Young
The existing documentation [1] for setting up SSL with Fossil is pretty thin. “Just set up an SSL web proxy,” it says. Yeah, “just.” :) Other advice recently given on this list is to use stunnel, but that’s only of use when Fossil hosts the whole web site, so you just need to proxy Fossil. If