diff options
| author | Jeff Byrnes <rbyrnes@athenahealth.com> | 2019-04-03 17:50:10 +0200 |
|---|---|---|
| committer | Jeff Byrnes <rbyrnes@athenahealth.com> | 2019-04-05 22:13:23 +0200 |
| commit | 7b636a75668fd43b03a966fdc3b66960918a62f4 (patch) | |
| tree | f33138fca8cff03d662257b6e8dc0b6de384d513 /INSTALL.md | |
| parent | Add optional SSL cert to docker-compose install (diff) | |
| download | awx-7b636a75668fd43b03a966fdc3b66960918a62f4.tar.xz awx-7b636a75668fd43b03a966fdc3b66960918a62f4.zip | |
Set up HTTPS w/ proper port & HTTP redirect
HTTPS is, by default, expected to be on port 443.
Also, with HSTS set, we need to be sure that users attempting to arrive
via HTTP are properly redirected to HTTPS.
This does so by:
* Setting up a 301 redirect for any URL to its HTTPS version
* Adjusting the internal port for HTTPS traffic to 8053
* Setting docker-compose to share port 443 → 8053
- This is configurable via an inventory variable
Diffstat (limited to 'INSTALL.md')
| -rw-r--r-- | INSTALL.md | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/INSTALL.md b/INSTALL.md index 65cda0954e..64488550dc 100644 --- a/INSTALL.md +++ b/INSTALL.md @@ -443,6 +443,10 @@ Before starting the build process, review the [inventory](./installer/inventory) > Provide a port number that can be mapped from the Docker daemon host to the web server running inside the AWX container. Defaults to *80*. +*host_port_ssl* + +> Provide a port number that can be mapped from the Docker daemon host to the web server running inside the AWX container for SSL support. Defaults to *443*, only works if you also set `ssl_certificate` (see below). + *ssl_certificate* > Optionally, provide the path to a file that contains a certificate and its private key. |