PIXILAB Wiki

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision 		Previous revision
blocks:server:https [2020-06-03 09:03]
admin Changed port numbers from 9xxx to 8xxx to match new server image 		blocks:server:https [2023-04-24 08:14] (current)
admin Improved initial note text
Line 1: Line 1:
-===HTTPS===+======Using HTTPS for Secure Server Communication====== 
 + 
 +:!: **NOTE**: The method described here has been replaced by the [[blocks:server:nginx|nginx reverse proxy]] method when using our Linux based server image. The method described below still applies for Linux server image versions prior to 221214, as those don't have nginx pre-installed. It can also be used if you run Blocks server on Mac, Windows or any other environment where nginx is not available.
  
 To make Blocks serve your content over HTTPS you have to add a certificate for your domain and configure Blocks to use it. Follow the steps below: To make Blocks serve your content over HTTPS you have to add a certificate for your domain and configure Blocks to use it. Follow the steps below:
Line 11: Line 13:
 server: server:
   type: pixilab_server   type: pixilab_server
 +  requireHttps: true
   applicationConnectors:   applicationConnectors:
     - type: http     - type: http
Line 26: Line 29:
   * **keyStorePassword** is the password used to access the certificate file.   * **keyStorePassword** is the password used to access the certificate file.
   * **certAlias** is the alias name given to the proper certificate in the file (as it may contain more than one).   * **certAlias** is the alias name given to the proper certificate in the file (as it may contain more than one).
 +
 +The //requireHttps// option will enforce the use of HTTPS (except for unauthenticated Spots), preventing users from accidentally using the insecure http method.
  
 Once you have HTTPS working on your server, you may also want to switch to the [[blocks:server:form_authentication|form based login method]], since that method allows users to log out without having to close the web browser. Once you have HTTPS working on your server, you may also want to switch to the [[blocks:server:form_authentication|form based login method]], since that method allows users to log out without having to close the web browser.