Code development platform for open source projects from the European Union institutions 🔵 EU Login authentication by SMS has been phased out. To see alternatives please check here

Skip to content

ACME CommisSign via VIP

Decision record

The ACME CommisSign mapping should be served by all INTERNAL reverse proxies. Therefore, traffic should go via the VIP.

To do so, we must expose the 8443 port on the Traefik container, and add a router on the WAF layer for TLS termination.

Changes

  • Expose port 8443 on Traefik if view_name == "internal"
  • Route traffic for CommisSign to WAF layer if view_name == "internal"
  • 🔖 v0.43.0
Edited by Youssef BOUFNICHEL

Merge request reports

Loading