I intend to create the following setup with a single server droplet:
- What I want to achieve is to only setup SSL / HTTPS once for my Apache2 web server using a wildcard certificate as depicted above.
- Furthermore I want to configure multiple subdomains for Apache2 that direct traffic to individual Ports via ProxyPass, each port mapping to a different Docker container, this time using HTTP instead of HTTPS (as shown above).
- Additionally, I have setup "Redirect permanents" for Apache2 making sure that e.g. http://x.domain.com is always redirected to https://x.domain.com
The main advantage I see in this configuration is that I don't have to worry about any kind of SSL configuration inside the Docker containers / for the apps running inside the Docker containers. Furthermore, it would be extremely easy to configure further subdomains and have additional containers running, all supporting SSL / HTTPS out of the box.
Now my question(s):
- Is the above setup reasonable, is there something I could improve?
- Are there any kind of security issues?
- At the moment it is still possible to directly enter e.g. "http://x.domain.com:6000" in the browser and SSL / HTTPS is bypassed. Is there any issue with that from a security POV and if yes, how could I prevent that?