Securing HTTP traffic of your Sync server
#
IntroductionThese instructions will enable you to secure HTTP traffic of your standalone infrastructure, using a reverse proxy with Nginx
.
#
Pre-requisites- Your standalone infrastructure is running on our docker setup
- You've installed
nginx
in your server. - You've configured a domain name (or subdomain) to point to your server's IP address.
#
Getting started#
Setting up NginxDisable the default virtual host:
Create a new file named
standardnotes.conf
within/etc/nginx/sites-available
:Note Replace
yourdomain.com
with your actual domain and3000
with the port you have specified as{EXPOSED_PORT}
if you have changed it.Enable your new site:
Restart Nginx to apply changes
There may be different ways to restart Nginx. If you installed Nginx from Ubuntu's default repository just type:
Test your
Nginx
configuration with:Setting up Certbot for HTTPS configuration
Go to certbot to get and install your HTTPS certificate.
Certbot should automatically update your Nginx configuration and create SSL certificates for you.
After completing the above instructions, your Sync server should be HTTPS enabled!
#
Using your secured serverIn the account menu, choose Advanced Options
and enter the address of your new server in Sync Server Domain
.
Then, register for a new account or log into an existing account and begin using your private new secure Standard Notes server!