Serving HTTPS

Use Kong's ACME plugin to automatically acquire TLS certificate.

Your server must listen on port 80 and 443.

Edit these variables in your .env file (located in your flow-backend/docker folder):

KONG_HTTP_PORT=80
KONG_HTTPS_PORT=443

Save your email to KONG_ACME_EMAIL variable:

KONG_ACME_EMAIL="[e-mail]"

This email will be used by Let's Encrypt to send warnings about certificates about to expire or clients are still using deprecated setups.

Your server must have a public IP address and your domain's DNS record must resolve to your server IP address.

Then, restart the services:

docker compose down
docker compose up -d --wait

Send a request to trigger TLS certificate generation:

curl -k https://<your domain>/flow-server/healthcheck

Wait up to 1 minute for the certificate to be generated.

Test your TLS setup;

curl https://<your domain>/flow-server/healthcheck

You should see:

{"success":true}

See more:

• Lightsail tutorial
• Kong ACME Plugin