[DOC] Adds required nginx setup

This commit is contained in:
Jorge Enrique Gómez Gómez 2021-03-28 23:55:48 +00:00
parent a6dc6386b6
commit b5444939da

View File

@ -24,3 +24,13 @@ ansible-pull \
The file ~/.vault_pass.txt contains the cleartext password to the vault
file where the Dreamhost API key and the Gitea deploy keys are stored
encrypted.
## Prerequisites
A container called **nginx** should exist, with these packages already installed:
```sh
lxc exec nginx -- apt -y install nginx certbot python3-certbot-nginx
```
This container should listen to external connections, in order to allow **Let's Encrypt** certificates to be assigned and renewed. It's strongly suggested to protect it using **fail2ban**, Geo-IP restrictions, or other security measures.