Nginx Reverse Proxy & SSL

Nginx Reverse Proxy & SSL

Adding a Domain + SSL (Let's Encrypt)

# Install certbot
apt install certbot python3-certbot-nginx

# Get certificate (replace with your domain)
certbot --nginx -d easytime.yourcompany.com

# Certbot auto-updates nginx.conf with SSL config

Manual nginx SSL Config

Edit nginx/nginx.conf:

server {
  listen 443 ssl http2;
  server_name easytime.yourcompany.com;
  ssl_certificate     /etc/letsencrypt/live/easytime.yourcompany.com/fullchain.pem;
  ssl_certificate_key /etc/letsencrypt/live/easytime.yourcompany.com/privkey.pem;

  location /iclock/ { proxy_pass http://backend; }
  location /api/    { proxy_pass http://backend; }
  location /        { proxy_pass http://frontend; }
}
server {
  listen 80;
  return 301 https://$host$request_uri;
}

Updating ZKTeco Devices for HTTPS

Change device Cloud Server URL to https://easytime.yourcompany.com/.