Closed
Description
Observed:
❯ ssh coder.peter-dev
2023/03/16 12:52:27 tlsdial: warning: server cert for "coder.dev.ourdomain.io" is not a Let's Encrypt cert
Note: This doesn't prevent ssh'ing in, it still works.
Context:
- Coder version:
0.19.2(server and client both) - We're running Coder behind a nginx proxy.
- Traffic Route:
Loading
graph TD; A[user]-->B[aws elb]; B -- tls passthrough --> C[aws instance]; C-->D[nginx process]; D -- tls terminated at nginx -->E[coder process]; - See attached
userdata.tplfor/etc/coder.d/coder.envand nginx configuration. - Nginx configuration mostly follows the recommendations from - https://github.com/coder/coder/tree/main/examples/web-server/nginx
- TLS cert served by NGINX is not issued by LetsEncrypt or an internal CA, but by a public CA (digicert).
- No TLS_* fields set in coder configuration. (see attached)