adding in tls for grpc without serverside encryption, just LB level

2023-08-15 10:37:58 -07:00
parent 1c37ab26ff
commit 7067d91245
1 changed files with 12 additions and 11 deletions
@@ -80,17 +80,18 @@ http {
      }
    }

-    # server {
-    #   listen 443 ssl http2;
-    #   server_name api.flowy.live;
-    #
-    #   ssl_certificate     ssl/cert.pem;
-    #   ssl_certificate_key ssl/key.pem;
-    #
-    #   location / {
-    #     grpc_pass grpcs://localhost:50051;
-    #   }
-    # }
+    server {
+      listen 443 ssl http2;
+      server_name api.flowy.live;
+
+      # RSA certificate
+      ssl_certificate /etc/letsencrypt/live/flowy.live/fullchain.pem; # managed by Certbot
+      ssl_certificate_key /etc/letsencrypt/live/flowy.live/privkey.pem; # managed by Certbot
+
+      location / {
+        grpc_pass grpc://localhost:50051;
+      }
+    }
 }

 stream {