Tutor only work on Debian-based machines
We have an override that mounts /etc/ssl/certs
from the host system, required for proxying js-components as that needs the /etc/ssl/certs/ca-certificates.crt
file.
However on my machine (i use arch btw) ca-certificates.crt
points to ../../ca-certificates/extracted/tls-ca-bundle.pem
which is outside /etc/ssl/certs
, and we probably don't want to include the whole /etc/ssl
either.
Two solutions:
- Install
ca-certificates
on the nginx image. Since tutor doesn't allow for such customization, this is kind of out of the way. - Let Caddy handle the forwarding. It has the CA certificates by default. Plus, it will remove a middle man.