self-signed cert for es

hydroshare · Sep 15, 2023 · 59049fb · 59049fb
1 parent a5bb1d2
commit 59049fb
Show file tree

Hide file tree

Showing 2 changed files with 27 additions and 4 deletions.
diff --git a/nginx/conf.d_templates/es.conf.conf b/nginx/conf.d_templates/es.conf.conf
@@ -5,12 +5,17 @@ upstream docker-elasticsearch {
 server {
     listen ${ELASTIC_PROXY_PORT};
     server_name ${METRICS_HOSTNAME};
-    access_log /var/log/nginx/kibana-public.log;
+    access_log /var/log/nginx/es-public.log;
 
-    allow ${OUTER_PROXY_IP};
-    deny all;
+#    allow ${OUTER_PROXY_IP};
+#    deny all;
+
+    ssl on;
+    ssl_certificate /etc/nginx/certs/elasticsearch/elasticsearch.crt;
+    ssl_certificate_key /etc/nginx/certs/elasticsearch/elasticsearch.key;
+    include ssl/ssl-params.conf;
 
     location / {
-        proxy_pass http://docker-elasticsearch;
+        proxy_pass https://docker-elasticsearch;
     }
 }
diff --git a/nginx/conf.d_templates_dev/es.conf.conf b/nginx/conf.d_templates_dev/es.conf.conf
@@ -0,0 +1,18 @@
+upstream docker-elasticsearch {
+    server elasticsearch:9200;
+}
+
+server {
+    listen ${ELASTIC_PROXY_PORT};
+    server_name ${METRICS_HOSTNAME};
+    access_log /var/log/nginx/es-public.log;
+
+    ssl on;
+    ssl_certificate /etc/nginx/certs/elasticsearch/elasticsearch.crt;
+    ssl_certificate_key /etc/nginx/certs/elasticsearch/elasticsearch.key;
+    include ssl/ssl-params.conf;
+
+    location / {
+        proxy_pass https://docker-elasticsearch;
+    }
+}