HTTPS Setup

[dancrowhurst]

Hi,

I'm running the latest release on a Raspberry Pi 4. I've got the standard HTTP site up and running, but need to look at enabling HTTPS. I've seen comments that imply running the enable_ssl.sh script will enable this, however when running the scrip it does nothing.

The script appears to be accessing running enable-ssl in the site.yml file located in /screenly/ansible, howerver the yml file does not do anything.

Has anyone been able to get https working recently and if so how did you accomplish this?

Many thanks,
Daniel

[dyseptical]

I ran into the same issue, but haven't found a real solution yet - i do have a workaround though.

• I installed Anthias with the supplied install script and rebooted the Pi.
• You now need to edit the File ~/screenly/docker-compose.yml.tmpl:

For the anthias-nginx container, replace the current port configuration:

    ports:
      - 80:80

With this:

    ports:
      - 127.0.0.1:8080:80

This procedure is also documented here: https://docs.docker.com/network/

If you include the localhost IP address (127.0.0.1) with the publish flag, only the Docker host can access the published container port.

$ docker run -p 127.0.0.1:8080:80 nginx

• You can execute the script under ~/screenly/bin/upgrade_containers.sh to apply this change.
• Install a web server of your choosing on the Pi directly, i chose nginx for this
• Configure a site that proxies the connection. For nginx, this can be done with
  proxy_pass http://127.0.0.1:8080/;
• On this site, you can now configure HTTPS with your own certificates and Security options.
• You can also configure a HTTP->HTTPS Redirect with this.

This configuration survives updating the containers with upgrade_containers.sh, but probably won't survive updating via the run_upgrade.sh script.

Maybe the supplied install script could ask if you want to use you own web server as a proxy?
Setting up the Proxy isn't hard and having full control over the nginx's Security configuration (and how often its updated) would be quite a plus for me.