setup tls cert for nginx

CONTRIBUTING.md

@@ -72,7 +72,8 @@ Add in `/etc/hosts`
 ```console
 127.0.0.1 poser.local
 ```
-and now you can see the app on [http://poser.local:8001](http://poser.local:8001)
+and now you can see the app on [https://poser.local:8002](https://poser.local:8002)
+(or if needed to test the HTTP procol use [http://poser.local:8001](http://poser.local:8001)).
 
 ### Otherwise, for the other days
 ```bash

Makefile

@@ -39,6 +39,7 @@ status: ## docker containers status
 ##@ DEV
 
 install: ## install php and node dependencies
+	- ./sys/nginx/certs/gen-selfsigned-cert.sh poser.local
 	- docker compose exec phpfpm composer install
 	- docker compose run --rm node yarn install
 

docker-compose.yml

@@ -16,6 +16,7 @@ services:
       - ./sys/nginx/default.conf.template.dev:/etc/nginx/templates/default.conf.template
     ports:
       - "8001:80"
+      - "8002:443"
     networks:
       - application-network
 
@@ -70,7 +71,7 @@ services:
       net.core.somaxconn: 1024
 
 
-#Docker Networks
+# Docker Networks
 networks:
   application-network:
     driver: bridge

sys/nginx/certs/ca-crt.pem

@@ -0,0 +1,27 @@
+-----BEGIN CERTIFICATE-----
+MIIEozCCAosCFG9PUzdRzVHWRV7NKk9k2hiXRZvbMA0GCSqGSIb3DQEBCwUAMA0x
+CzAJBgNVBAMMAmNhMCAXDTI0MDkwNjIwMzYxN1oYDzIwNTIwMTIyMjAzNjE3WjAN
+MQswCQYDVQQDDAJjYTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK7y
+1KZ6PJLC6BlxQIL9ITe4rOeC9EdEhQLLF1SMJEcarw8XgBMJXrs0PCyBrzL12HS2
+6Znmceo3Zfv1gfJAn1u4Z1tIA3ibQ+I9f7fr2Ixy+Ug2HcNHJPJiLoThWP7cw2m+
+8W3XlmvceM+io3YRyIzJATMYrD2+tXSoNmzP9CkD1S1Izw0ogUgGxKseKMoA9/4C
+Hd8in6nCMHgE/HmiJaXdpxxUXNY3pdIbjVF0hvS3pcE5UMQi8eqJmEOYbm0iuwZg
+s8ytrvHmddSldf+eedGGEksv3QV6dDwvdg7Pl4z9Hpss50t89WmNiALn1k047Idr
+kpKabB+o/NEdsfSZBBXr4+eUJ6EhpP9q9jwa/Ptca3xMXMp9x9D1KnRBiWbJcQ+o
+FuoL+3+4HfC9/M16T3niR9x28X4PfpFmNMpz3gQdYcrs7p21fXR/CgtAz7PD4w4Y
+Wl3EI4k3J4yDo7/+qZ4PUCQPZ56H5lcWdwK9hGFg4giv+SJdtjkYGqhTDPxDPSoC
+F4LNsEkwo8Yb+SVSd23L7X/vUZm7Wm2G8fWcuM0w7Vi3AFHoF1QzK7KY29PNZ1bM
+K9pVpdKkPhZDLWPENezQFzGipxVyXYSbKkn5NpzSEhhP0ZUtuPuKeABydHYVZXRs
+7d7QmPx//R3wlsXCAE35AXs0Dk8sRhAj3Z/G0o4jAgMBAAEwDQYJKoZIhvcNAQEL
+BQADggIBAES4DeC/yogYPyl34Oe3fj3TGmhYCIbdf1maO8BumPdpmYdFmxPEWSHy
+9Yy762rarr9nULuXblC0F/He1yjLEGSFrR0nK/v+hAOMmHBfLvkgthsWCXf3wW5F
+74R4UVjJuCPB5k3cNcxXnhoqBkDSb240vtOHmNlJR6IQ5FlkB2BNW3aBV+Vv/v+o
+S0wif+QiATXw7M5pKS/XJWY4CDIaMB4kwBVARnONLRJcHn1qHg7/v0EnYu7OByzd
+Wd49UViD3KcMnWTKzDvjjm0e0K8fDtod0dPKsPR2CS4rTQEfAhIvjcPnWNh7jfP3
+joakNLA/SXIbBsbdML21os7E9HrE6cmS1f+Apd0OzEOBCtn77YJHSJz45TodDOVj
+af2AwtlfLg4y8pEdYC0gngbYpzdWgcTbIw0zU+vXs45rl+ysI80sxH/JT1U2h4Qw
+ZaisRGrHYOoAVuF+VsYkFg6hVNboJCbUeGkrRxnl/y+s2lZi6fUX79VgoNhxYnwy
+rEZtSs+C0HtMJmVbsHixGoA9DenvPlFV00pbmK3BO7G9OxhV5xC6jOvQOGKb4ilV
+A2WItGkJ1k9nMwSxfvazZAMyFQiHe1XzdIB7lytUt/h49qpyhXMr8i5aJSnDnc2k
+e7+95ayQrAEOAOKV6aJ/PaL6EbuIl3vtDuWk/YzmsE1a3mu+XWsO
+-----END CERTIFICATE-----

sys/nginx/certs/ca-crt.srl

@@ -0,0 +1 @@
+6F6006AE94C028DE19FFF4CC39D212ACE0E02AAC

sys/nginx/certs/ca-key.pem

@@ -0,0 +1,54 @@
+-----BEGIN ENCRYPTED PRIVATE KEY-----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+-----END ENCRYPTED PRIVATE KEY-----

sys/nginx/certs/ca.cnf

@@ -0,0 +1,25 @@
+[ ca ]
+default_ca      = CA_default
+
+[ CA_default ]
+serial = ca-serial
+crl = ca-crl.pem
+database = ca-database.txt
+name_opt = CA_default
+cert_opt = CA_default
+default_crl_days = 9999
+default_md = md5
+
+[ req ]
+default_bits           = 4096
+days                   = 9999
+distinguished_name     = req_distinguished_name
+attributes             = req_attributes
+prompt                 = no
+output_password        = password
+
+[ req_distinguished_name ]
+CN                     = ca
+
+[ req_attributes ]
+challengePassword      = test

sys/nginx/certs/gen-selfsigned-cert.sh

@@ -0,0 +1,38 @@
+#!/usr/bin/env bash
+
+SCRIPT_DIR=$(cd -- "$( dirname -- "${BASH_SOURCE[0]}" )" &> /dev/null && pwd)
+
+DOMAIN=$1
+if [ "$DOMAIN" == "" ]; then
+  DOMAIN="default"
+fi
+
+# CA
+openssl req \
+  -new \
+  -x509 \
+  -days 9999 \
+  -config "$SCRIPT_DIR/ca.cnf" \
+  -keyout "$SCRIPT_DIR/ca-key.pem" \
+  -out "$SCRIPT_DIR/ca-crt.pem"
+
+openssl genrsa -out "$SCRIPT_DIR/server.key" 4096
+
+# CSR
+openssl req \
+  -new \
+  -config "$SCRIPT_DIR/server.cnf" \
+  -key "$SCRIPT_DIR/server.key" \
+  -out "$SCRIPT_DIR/server.csr"
+
+# CERT
+openssl x509 \
+  -req \
+  -extfile "$SCRIPT_DIR/server.cnf" \
+  -days 3650 \
+  -passin "pass:password" \
+  -in "$SCRIPT_DIR/server.csr" \
+  -CA "$SCRIPT_DIR/ca-crt.pem" \
+  -CAkey "$SCRIPT_DIR/ca-key.pem" \
+  -CAcreateserial \
+  -out "$SCRIPT_DIR/server.pem"

sys/nginx/certs/server.cnf

@@ -0,0 +1,24 @@
+[ req ]
+default_bits           = 4096
+days                   = 9999
+distinguished_name     = req_distinguished_name
+attributes             = req_attributes
+prompt                 = no
+x509_extensions        = v3_ca
+
+[ req_distinguished_name ]
+CN                     = poser.local
+
+[ v3_req ]
+
+subjectAltName = DNS:poser.local
+
+[ req_attributes ]
+challengePassword      = password
+
+[ v3_ca ]
+authorityInfoAccess = @issuer_info
+
+[ issuer_info ]
+OCSP;URI.0 = http://ocsp.example.com/
+caIssuers;URI.0 = http://example.com/ca.cert

sys/nginx/certs/server.csr

@@ -0,0 +1,26 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----

sys/nginx/certs/server.key

@@ -0,0 +1,52 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

sys/nginx/certs/server.pem

@@ -0,0 +1,27 @@
+-----BEGIN CERTIFICATE-----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==
+-----END CERTIFICATE-----

sys/nginx/default.conf.template.dev

@@ -24,6 +24,16 @@ server {
     listen 80;
     server_name poser.pugx.org poser.packagist.org poser.local stg.poser.pugx.org;
 
+    return https://$server_name;
+}
+
+server {
+    listen 443 ssl;
+    server_name poser.pugx.org poser.packagist.org poser.local stg.poser.pugx.org;
+
+    ssl_certificate /application/sys/nginx/certs/server.pem;
+    ssl_certificate_key /application/sys/nginx/certs/server.key;
+
     root /application/public;
 
     fastcgi_cache cached_badges;