Skip to content

Conversation

@so77nava
Copy link
Contributor

🔧 Description
This PR prepares the production deployment environment for enabling HTTPS via Traefik and Let's Encrypt under the domain amos.b-iq.net.

Includes:
-->Traefik configuration with ACME (Let's Encrypt) support

-->Routing setup with Docker labels and TLS resolvers

-->Separate HTTP and HTTPS routers for frontend and backend

-->HTTP-to-HTTPS redirection via middleware

-->Dynamic configuration (traefik_dynamic.yml) for reusable middlewares

-->Dedicated ACME challenge router to allow successful certificate issuance

⚠️ Known Limitations
The app is currently running locally on Windows using Docker Desktop.

Let’s Encrypt cannot issue the certificate yet because the domain points to a public server IP, while Traefik is not running there.

HTTPS will only work once deployed to the actual server (144.76.28.184).

📌 Next Steps
Deploy the app to the production server

Confirm certificate issuance via Traefik logs

Test public access to https://amos.b-iq.net

🧪 How to Test (locally)
Run: docker-compose -f docker-compose-prod.yml up -d

Check dashboard: http://localhost:8080/dashboard

Confirm router setup and middleware

Let’s Encrypt will fail locally, but config structure is in place

arpita739 and others added 30 commits May 31, 2025 22:40
Signed-off-by: Masudur Rahaman Kazi <[email protected]>
Signed-off-by: Masudur Rahaman Kazi <[email protected]>
so77nava added 13 commits June 4, 2025 11:37
…force the use of port 80 to Traefik

Signed-off-by: so77nava <[email protected]>
… of default.conf to resolve root problems

Signed-off-by: so77nava <[email protected]>
…s redirection for production server

Signed-off-by: so77nava <[email protected]>
Signed-off-by: so77nava <[email protected]>
…rypt ACME HTTP challenge to succeed

Signed-off-by: so77nava <[email protected]>
Signed-off-by: so77nava <[email protected]>
@so77nava so77nava linked an issue Jun 17, 2025 that may be closed by this pull request
so77nava and others added 16 commits June 19, 2025 22:13
Signed-off-by: so77nava <[email protected]>
Signed-off-by: so77nava <[email protected]>
Signed-off-by: so77nava <[email protected]>
Signed-off-by: Masudur Rahaman Kazi <[email protected]>
Signed-off-by: so77nava <[email protected]>
Signed-off-by: so77nava <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Enforce HTTPS on Production Server

4 participants