benjamin.baker 5420ac432d Serve the dev/test stack over HTTPS with a mounted self-signed cert ...

Terminate TLS in gunicorn using a host-generated cert mounted read-only under ./certs, so the browser sees a secure context. Secure-context-only web APIs (navigator.clipboard and others) refuse to run over plain http on a non-localhost origin, which the FQDN-accessed test box hits. Healthcheck now probes https with -k to match the TLS listener. A site swaps in its own cert or fronts this with its own IIS/nginx proxy.

2026-08-30 14:41:22 -04:00

4.7 KiB

Raw Blame History

View Raw