Comments (5)
Azure App Services is not the issue here, our public endpoints right now don't include SSL, we have this in our backlog and we will re-deploy the backend services with SSL certificate to support HTTPS as soon as possible. Meanwhile if you want to use the website with HTTPS you need to deploy the backend services with SSL and then change the app settings in the website to point to your own backend services.
from tailwindtraders-website.
Thanks David. SSL is a very sensitive issue - especially when sending authentication information over the wire, even for a demo. Does this:
our public endpoints right now don't include SSL
mean that you're not using Azure's App Services? I see the backend bits are in AKS and I can't say I fully understand what goes where (though I'm trying). Do we own the domains you're using or are they 3rd party?
from tailwindtraders-website.
Thanks @robconery. On January we will be adding a new public endpoints (backend) with a SSL certificate so we can use HTTPs in the public website without having to deploy the backend services. Assigning @eiximenis to this issue for creating the new environment.
from tailwindtraders-website.
Was this closed based on a code fix? I'm looking but can't tell if ssl is required.
from tailwindtraders-website.
Hi @robconery
Backend now supports TLS through cert-manager and let's encrypt, so now it is possible to deploy a backend environment with https :)
Additionally is also possible to deploy the web inside the AKS instead of using app service (although this is not related about the https issue).
Instructions about enabling TLS in Backend are in https://github.com/Microsoft/TailwindTraders-Backend/blob/master/Documents/DeploymentGuide.md#enabling-ssltls-on-the-cluster
from tailwindtraders-website.
Related Issues (20)
- Broken build HOT 1
- Default Deployment Option Should be Standalone
- Create Request Form to use a MS Hosted Backend
- Deploy Web script fails with error
- Levicryptotrade investment
- Is note version correct?
- Node Version
- Bad certificates, unsecure connection HOT 1
- The Deploy to Azure button doesn't work, it gives 404 HOT 1
- Deploy doesn't work as image cannot be found HOT 1
- README mentions use of a non-refererenced environment variable `REPOSITORY` HOT 1
- Hardcoded API endpoint in docker-compose HOT 1
- Added a specific ports setting to docker-compose HOT 2
- documentation or guidence on connecting backend HOT 1
- Hard-coded email setting means app has precisely one user HOT 2
- Is Cosmos DB required for a client app? HOT 1
- .env files should not be checked in HOT 1
- Error when try to use the Standalone "automatic deployment" HOT 3
- Dockerfile pinned to 3.1 .NET SDK causes failures to build on docker. HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from tailwindtraders-website.