Setting up SSL certificates

The web docker image in Aurora is built to serve on both HTTP and HTTPS requests. However, the certificate configuration is needed to be done. There can 2 scenarios based on which your configuration will differ.

Serving via docker image

For this, we recommend to use docker secrets and set the paths in the compose file. Just run the following commands create docker secrets.

cat certificate.crt | docker secret create ssl_cert -
cat ca_bundle.crt | docker secret create ssl_chain -
cat private.key | docker secret create ssl_key -

And create a configuration file similar to

And mount this at /etc/apache2/sites-enabled using volumes in compose file.

Serving via a reverse proxy

If you want to serve other stacks along with Aurora (like blogs, editorials, and forums) on the same domain but different paths, then you need to configure a reverse proxy to each of these stacks on their respective paths using something like Nginx. To let Aurora know its path, just set the AURORA_BASE_URL environment to the path (i.e. if Aurora is to be deployed as https://example.com/aurora then set AURORA_BASE_URL to /aurora). And configure all your certificates on the reverse proxy itself.