[DOC] Adds required nginx setup

This commit is contained in:
Jorge Enrique Gómez Gómez 2021-03-28 23:55:48 +00:00
parent a6dc6386b6
commit b5444939da

View File

@ -24,3 +24,13 @@ ansible-pull \
The file ~/.vault_pass.txt contains the cleartext password to the vault The file ~/.vault_pass.txt contains the cleartext password to the vault
file where the Dreamhost API key and the Gitea deploy keys are stored file where the Dreamhost API key and the Gitea deploy keys are stored
encrypted. encrypted.
## Prerequisites
A container called **nginx** should exist, with these packages already installed:
```sh
lxc exec nginx -- apt -y install nginx certbot python3-certbot-nginx
```
This container should listen to external connections, in order to allow **Let's Encrypt** certificates to be assigned and renewed. It's strongly suggested to protect it using **fail2ban**, Geo-IP restrictions, or other security measures.