As noted in https://github.com/dwyl/learn-devops/issues/104#issuecomment-2742585340 the `Autobase` console is served on `http`; (not `https`) 🔓 so requests to the console can be intercepted by a [`MITM`](https://en.wikipedia.org/wiki/Man-in-the-middle_attack). 😬 # Todo + [x] Setup (and _fully document_) `nginx` on the `autobase-console` server on `Hetzner` https://console.hetzner.cloud/projects/3886115/servers/57770120 + [x] Ensure _auto-updating_ `LetsEncrypt` https://community.letsencrypt.org/t/ssl-certificate-updating-automatically/185037 + [x] Setup ~~`autobase.dwyl.com`~~ `autobase.dwy.is` subdomain? so we don't have to access via IP Address? This should be quick. Just need uninterrupted time. 🧑💻 ⏳ Prereq: + [x] Add `MBP` SSH (`public`) key to the server so I can access it from laptop. 🔑 💻
As noted in #104 (comment) the
Autobaseconsole is served onhttp; (nothttps) 🔓so requests to the console can be intercepted by a
MITM. 😬Todo
Setup (and fully document)
nginxon theautobase-consoleserver onHetznerhttps://console.hetzner.cloud/projects/3886115/servers/57770120
Ensure auto-updating
LetsEncrypthttps://community.letsencrypt.org/t/ssl-certificate-updating-automatically/185037
Setup
autobase.dwyl.comautobase.dwy.issubdomain? so we don't have to access via IP Address?This should be quick. Just need uninterrupted time. 🧑💻 ⏳
Prereq:
MBPSSH (public) key to the server so I can access it from laptop. 🔑 💻