diff options
| -rw-r--r-- | README.markdown | 2 | ||||
| -rw-r--r-- | docs/secure-connections.markdown | 59 |
2 files changed, 61 insertions, 0 deletions
diff --git a/README.markdown b/README.markdown index 0b3af1da..9d7178ac 100644 --- a/README.markdown +++ b/README.markdown @@ -57,6 +57,7 @@ Contributors: - Gavlepeter: https://github.com/gavlepeter - Jesusaplsoft: https://github.com/jesusaplsoft - Kiswa: https://github.com/kiswa +- Levlaz: https://github.com/levlaz - Mathgl67: https://github.com/mathgl67 - Matthieu Keller: https://github.com/maggick - Maxime: https://github.com/EpocDotFr @@ -90,6 +91,7 @@ Documentation - [Installation on Debian](docs/debian-installation.markdown) - [Installation on Centos](docs/centos-installation.markdown) - [Upgrade Kanboard to a new version](docs/update.markdown) +- [Secure connections (HTTPS)](docs/secure-connections.markdown) #### Database diff --git a/docs/secure-connections.markdown b/docs/secure-connections.markdown new file mode 100644 index 00000000..109574ae --- /dev/null +++ b/docs/secure-connections.markdown @@ -0,0 +1,59 @@ +How to Enable Secure Connections +================================ + +If you are hosting Kanboard on a public server, and plan on accessing it via the internet, it is a good idea to enable SSL connections to encrypt your data. This is very simple to do with a self-signed certificate. The following instructions were created and tested on a server running Debian 7 (Wheezy) but they should work for any other Linux distribution. + +OpenSSL Installation and Configuration +-------------------------------------- +Install OpenSSL: + +```bash +apt-get update +apt-get install openssl +``` +Enable OpenSSL: + +```bash +a2enmod ssl +``` + +Create a self-signed certificate: + +```bash +mkdir /etc/apache2/ssl +openssl req -new -x509 -days 365 -nodes -out /etc/apache2/ssl/kanboard.pem -keyout /etc/apache2/ssl/kanboard.key +``` + +Apache Configuration +-------------------- +Create an apache configuration file: + +```bash +nano /etc/apache2/conf.d/kanboard.conf +``` + +The contents of this file should look like this: + +```bash +<VirtualHost 127.0.0.1:443> + SSLEngine on + SSLCertificateFile /etc/apache2/ssl/kanboard.pem + SSLCertificateKeyFile /etc/apache2/ssl/kanboard.key + DocumentRoot /var/www +<Directory kanboard> + AllowOverride All + order allow, deny + Allow from all +</Directory> +</VirtualHost> +``` + +Be sure to replace 127.0.0.1 with the IP address of your server. If you are hosting kanboard in a location other than /var/www , be sure to update the DocumentRoot to match the location where you are hosting your Kanboard site. + +Restart Apache: + +```bash +service apache2 restart +``` + +You will now be able to access your Kanboard site securely by navigating to `https://www.example.com/kanboard`. Your browser will indicate that the certificate is not trusted. This is due to the fact that it is self signed. You can safely ignore this warning, although the certificate is not trusted, your data is still encrypted. |