From 7067d912452f81bb7bfcadf80e48d9ce9134a7b5 Mon Sep 17 00:00:00 2001
From: talksik <patel.arjun50@gmai.com>
Date: Tue, 15 Aug 2023 10:37:58 -0700
Subject: [PATCH] adding in tls for grpc without serverside encryption, just LB
 level

---
 nginx.conf | 23 ++++++++++++-----------
 1 file changed, 12 insertions(+), 11 deletions(-)

diff --git a/nginx.conf b/nginx.conf
index 45ad2e7..48d74d1 100644
--- a/nginx.conf
+++ b/nginx.conf
@@ -80,17 +80,18 @@ http {
       }
     }
 
-    # server {
-    #   listen 443 ssl http2;
-    #   server_name api.flowy.live;
-    #
-    #   ssl_certificate     ssl/cert.pem;
-    #   ssl_certificate_key ssl/key.pem;
-    #
-    #   location / {
-    #     grpc_pass grpcs://localhost:50051;
-    #   }
-    # }
+    server {
+      listen 443 ssl http2;
+      server_name api.flowy.live;
+
+      # RSA certificate
+      ssl_certificate /etc/letsencrypt/live/flowy.live/fullchain.pem; # managed by Certbot
+      ssl_certificate_key /etc/letsencrypt/live/flowy.live/privkey.pem; # managed by Certbot
+
+      location / {
+        grpc_pass grpc://localhost:50051;
+      }
+    }
 }
 
 stream {