add tls

ls1intum · Aug 17, 2024 · e7a8d23 · e7a8d23
1 parent 7e0f16a
commit e7a8d23
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 1 deletion.
diff --git a/server/webhook-ingest/compose.yaml b/server/webhook-ingest/compose.yaml
@@ -4,7 +4,7 @@ services:
     ports:
       - "4200"
     environment:
-      - NATS_URL=nats://nats-server:4222
+      - NATS_URL=tls://nats-server:4222
       - SECRET=${SECRET}
     depends_on:
       - nats-server
@@ -16,9 +16,13 @@ services:
     ports:
       - "4222:4222"
     command: ["--config", "/etc/nats/nats-server.conf"]
+    environment:
+      - TLS_CERT_FILE
+      - TLS_KEY_FILE
     volumes:
       - nats_data:/data
       - ./nats-server.conf:/etc/nats/nats-server.conf
+      - /etc/letsencrypt:/etc/letsencrypt:ro
     networks:
       - common-network
 

diff --git a/server/webhook-ingest/nats-server.conf b/server/webhook-ingest/nats-server.conf
@@ -3,3 +3,9 @@ listen: "0.0.0.0:4222"
 jetstream {
   store_dir: "/data"
 }
+
+tls {
+  cert_file: $TLS_CERT_FILE
+  key_file: $TLS_KEY_FILE
+  verify_and_map: true
+}