Setting up HTTPS for a BrightID Node

There are various ways to set up an SSL reverse proxy in front of port 80. One way is to use nginx and certbot.

1. Get a domain name (sub-domains work). (This example uses aura-node.brightid.org).
   1. Configure the DNS to point the domain or sub-domain to your node's ip address.
2. Install nginx certbot and python-certbot-nginx

sudo apt-get install nginx certbot python-certbot-nginx

3. Configure your reverse proxy. Here is an example nginx configuration.

server {
        server_name aura-node.brightid.org;
        location / {
                proxy_pass http://127.0.0.1:80/;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_set_header X-Forwarded-Proto https;
                proxy_ignore_headers    X-Accel-Expires Expires Cache-Control;
                proxy_hide_header       Access-Control-Allow-Origin;
                add_header Access-Control-Allow-Origin * always;
        }
}

3. Run certbot

sudo certbot --nginx -d aura-node.brightid.org

See also this guide from nginx and certbot.