Document reverse proxy mTLS forwarding and Master CA in README.md
This commit is contained in:
@@ -115,6 +115,7 @@ graph TB
|
|||||||
- **Automated Container Pipeline & Portainer GitOps Deployment**:
|
- **Automated Container Pipeline & Portainer GitOps Deployment**:
|
||||||
- The license authority repository includes a dedicated CI/CD workflow ([`.gitea/workflows/build-container.yml`](file:///u:/max/Desktop/LOGAR/LOGAR-LICENSING/.gitea/workflows/build-container.yml)) compiling and publishing the container image to `gitea.eibl.tech/me0nline/logar-licensing:latest`.
|
- The license authority repository includes a dedicated CI/CD workflow ([`.gitea/workflows/build-container.yml`](file:///u:/max/Desktop/LOGAR/LOGAR-LICENSING/.gitea/workflows/build-container.yml)) compiling and publishing the container image to `gitea.eibl.tech/me0nline/logar-licensing:latest`.
|
||||||
- It deploys seamlessly in Portainer using a GitOps Stack connected directly to [`LOGAR-LICENSING`](https://gitea.eibl.tech/me0nline/LOGAR-LICENSING.git) via [`docker-compose.yml`](file:///u:/max/Desktop/LOGAR/LOGAR-LICENSING/docker-compose.yml) with automatic polling or webhook redeployment and persistent volume storage (`logar_licensing_data`) preserving Root CA keys and database.
|
- It deploys seamlessly in Portainer using a GitOps Stack connected directly to [`LOGAR-LICENSING`](https://gitea.eibl.tech/me0nline/LOGAR-LICENSING.git) via [`docker-compose.yml`](file:///u:/max/Desktop/LOGAR/LOGAR-LICENSING/docker-compose.yml) with automatic polling or webhook redeployment and persistent volume storage (`logar_licensing_data`) preserving Root CA keys and database.
|
||||||
|
- Reverse proxy integration (e.g., Nginx Proxy Manager, Caddy) terminates HTTPS on port 443, verifies client mTLS against the downloadable Master Root CA (`/api/ca.crt`), and forwards client certificate headers (`X-SSL-Client-Cert`) to port 8090.
|
||||||
|
|
||||||
### 3. Integrated Fleet Licensing & WebUI Dashboard
|
### 3. Integrated Fleet Licensing & WebUI Dashboard
|
||||||
- **WebUI URL**: Accessible at `http://<server_host>:8443/webui` (or `/`).
|
- **WebUI URL**: Accessible at `http://<server_host>:8443/webui` (or `/`).
|
||||||
|
|||||||
Reference in New Issue
Block a user