Tutor only work on Debian-based machines
We have an override that mounts /etc/ssl/certs from the host system, required for proxying js-components as that needs the /etc/ssl/certs/ca-certificates.crt file.
However on my machine (i use arch btw) ca-certificates.crt points to ../../ca-certificates/extracted/tls-ca-bundle.pem which is outside /etc/ssl/certs, and we probably don't want to include the whole /etc/ssl either.
Two solutions:
- Install
ca-certificateson the nginx image. Since tutor doesn't allow for such customization, this is kind of out of the way. - Let Caddy handle the forwarding. It has the CA certificates by default. Plus, it will remove a middle man.