-

Author: stephanediondev

Dockerfile

@@ -19,6 +19,8 @@ RUN apk --update add php7 php7-fpm php7-opcache php7-json php7-openssl php7-curl
 
 # Configure nginx
 COPY docker/nginx.conf /etc/nginx/nginx.conf
+COPY docker/privkey.pem /etc/nginx/privkey.pem
+COPY docker/fullchain.pem /etc/nginx/fullchain.pem
 
 # Configure PHP-FPM
 COPY docker/fpm-pool.conf /etc/php7/php-fpm.d/www.conf
@@ -35,6 +37,7 @@ RUN chown -R nobody.nobody /var/www/html && \
   chown -R nobody.nobody /.composer && \
   chown -R nobody.nobody /.npm && \
   chown -R nobody.nobody /run && \
+  chown -R nobody.nobody /etc/nginx && \
   chown -R nobody.nobody /var/lib/nginx && \
   chown -R nobody.nobody /var/log/nginx
 

docker/fullchain.pem

@@ -0,0 +1,18 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

docker/nginx.conf

@@ -32,7 +32,12 @@ http {
     server {
         listen [::]:8080 default_server;
         listen 8080 default_server;
+        listen 4443 ssl;
         server_name _;
+        ssl_certificate /etc/nginx/fullchain.pem;
+        ssl_certificate_key /etc/nginx/privkey.pem;
+        ssl_protocols TLSv1.2;
+        ssl_ciphers HIGH:!aNULL:!MD5;
 
         sendfile off;
 

docker/privkey.pem

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

docs/index.md

@@ -127,15 +127,15 @@ Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in
 The Docker image is hosted on Docker Hub [Visit](https://hub.docker.com/r/stephanediondev/elasticsearch-admin)
 
 ```
-docker pull stephanediondev/elasticsearch-admin
-
-docker run -e "ELASTICSEARCH_URL=http://x.x.x.x:9200" -e "SECRET_REGISTER=xxxxx" -p 80:8080 -d --name elasticsearch-admin stephanediondev/elasticsearch-admin
+docker run -e "ELASTICSEARCH_URL=http://x.x.x.x:9200" -e "SECRET_REGISTER=xxxxx" -p 80:8080 -p 443:4443 -d --name elasticsearch-admin stephanediondev/elasticsearch-admin
 ```
 
 Edit ```ELASTICSEARCH_URL``` and ```SECRET_REGISTER``` (random string to secure registration)
 
 If Elasticsearch security features are enabled, add ```-e "ELASTICSEARCH_USERNAME=xxxxx" -e "ELASTICSEARCH_PASSWORD=xxxxx"```
 
+If you have SSL certificates add ```-v /path/privkey.pem:/etc/nginx/privkey.pem -v /path/fullchain.pem:/etc/nginx/fullchain.pem```
+
 ## Source installation
 
 [(Back to installation)](#installation)