How to apply a certificate if port 80 is used by chainpoint gateway ?

[jo2h2]

@jacohend - you stated when "the gateway initialized properly. If it did, it will be accessible on port 80 instead of 8080."

Originally posted by @jacohend in #51 (comment)

As both Chrome but CURL as well are complaining that the certificate is invalid I thought to install nginx and let's enrypt and put the valid certificates into the right placces.

Is this the recommended approach ? But if port 80 is used by chainpoint gateway - would it be the right approach to shut down chainpoint gateway, start up nginx, do the certificate update, stop nginx and restart chainpoint gateway ... ? Or what would be the proper way ?

Thanks a lot !

Best wishes,
Jo ...

[jacohend]

You could use a forward proxy such as Traefik. It'll also handle Let's Encrypt.

[jo2h2]

Hi Jacob,

thanks for your hint - and I started with traefik following this https://www.digitalocean.com/community/tutorials/how-to-use-traefik-v2-as-a-reverse-proxy-for-docker-containers-on-ubuntu-20-04 tutorial.

In Step 2 https://www.digitalocean.com/community/tutorials/how-to-use-traefik-v2-as-a-reverse-proxy-for-docker-containers-on-ubuntu-20-04#step-2-%E2%80%93-running-the-traefik-container, using parameter -p 80:80 fails (of course) as the chainpoint gateway is using this port - so I started the traefik docker without this parameter. But https://monitor.your_domain/dashboard/ is showing up and Let's Encrypt is working as well ...

Do I need change something in the existing chainpoint docker configuration related to the port 80 ?

But I am lost with https://www.digitalocean.com/community/tutorials/how-to-use-traefik-v2-as-a-reverse-proxy-for-docker-containers-on-ubuntu-20-04#step-3-%E2%80%94-registering-containers-with-traefik

Do I need to create a new separate traefik docker-compose.yml file as explained in above step 3 link ? Or should I tweak one of the existing ~/chainpoint-gateway$ docker-compose.yaml or swarm-compose.yaml ? and add e.g.
labels:
- traefik.http.routers.blog.rule=Host(chainpoint.your_domain)
- traefik.http.routers.blog.tls=true
- traefik.http.routers.blog.tls.certresolver=lets-encrypt
- traefik.port=80

And what about the "network = web" ? do I need to use this network web ...
[providers.docker]
watch = true
network = "web"

or should I tweak one of the below ??

NETWORK ID NAME DRIVER SCOPE
****** bridge bridge local
****** chainpoint-gateway_chainpoint-gateway overlay swarm
****** docker_gwbridge cbridge local
****** host host local
****** ingress overlay swarm
****** none null local
****** web bridge local

Sorry for all the questions :-) - and thanks for any hint you can give !

Best wishes,
Jo ...

[jo2h2]

Any hint for me ? :-)

Thanks a lot !