Add TLS/SSL support

-Added new settings for Expresss webserver TLS/SSL options
-Added instructions to the README for running the explorer on port 80
-Added instructions to the README for setting up a secure TLS/SSL connection for the explorer
-Moved the 'CORS Support' section higher up in the README
This commit is contained in:
joeuhren
2021-03-26 13:53:00 -06:00
parent a7d1ae8d0c
commit 9cdcfe659f
4 changed files with 268 additions and 52 deletions
+17 -1
View File
@@ -36,9 +36,25 @@ exports.wallet = {
// webserver: a collection of settings that pertain to the node.js express web framework (read more: https://www.npmjs.com/package/express)
exports.webserver = {
// port: Port # to configure the express webserver to listen for requests on
// port: Port # to configure the express webserver to listen for http requests on
// NOTE: Be sure to configure firewalls to allow traffic through this port or the explorer website may not be accessible remotely
"port": process.env.PORT || 3001,
// tls: a collection of settings that pertain to the TLS (Transport Layer Security) protocol feature (aka: ssl or https)
"tls": {
// enabled: Enable/disable TLS
// If set to true, the express webserver will be configured to use an https connection
// If set to false, all TLS features will be completely disabled
"enabled": false,
// port: Port # to configure the express webserver to listen for https requests on
// NOTE: Be sure to configure firewalls to allow traffic through this port or the explorer website may not be accessible remotely
"port": 443,
// cert_file: The absolute or relative path to the tls certificate file. Typically this file will be generated from certbot (read more: https://certbot.eff.org)
"cert_file": "/etc/letsencrypt/live/domain-name-here/cert.pem",
// chain_file: The absolute or relative path to the tls chain file. Typically this file will be generated from certbot (read more: https://certbot.eff.org)
"chain_file": "/etc/letsencrypt/live/domain-name-here/chain.pem",
// key_file: The absolute or relative path to the tls private key file. Typically this file will be generated from certbot (read more: https://certbot.eff.org)
"key_file": "/etc/letsencrypt/live/domain-name-here/privkey.pem"
},
// cors: a collection of settings that pertain to the cors feature
// Cross-Origin Resource Sharing (CORS) support (read more: https://www.maxcdn.com/one/visual-glossary/cors/)
// Enable this setting to allow another website to access data from the explorer without violating the same-origin policy