https stuff

Author: Pazl27

nginx-reverse.conf

@@ -2,15 +2,18 @@ worker_processes 1;
 
 events { worker_connections 1024; }
 
-http {
-  include       mime.types;
-  default_type  application/octet-stream;
-  sendfile        on;
-  keepalive_timeout  65;
-
-  server {
+server {
     listen 80;
-    server_name _;
+    server_name rocket-app.social www.rocket-app.social;
+    return 301 https://$host$request_uri/;
+}
+
+server {
+    listen 443 ssl;
+    server_name rocket-app.social www.rocket-app.social;
+
+    ssl_certificate /etc/letsencrypt/live/rocket-app.social/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/rocket-app.social/privkey.pem;
 
     # Forward API requests to backend (with WebSocket support)
     location /api/v1/ {
@@ -42,4 +45,4 @@ http {
       proxy_set_header   X-Forwarded-Proto $scheme;
     }
   }
-}
+}

prod.yml

@@ -68,10 +68,10 @@ services:
     image: nginx:1.27-alpine
     volumes:
       - ./nginx-reverse.conf:/etc/nginx/nginx.conf:ro
-      # - ./certs:/etc/nginx/certs:ro
+      - ./lets-encrypt:/etc/letsencrypt:ro
     ports:
-      # - "443:443"
-      - "8088:80"
+      - "443:443"
+      # - "8088:80"
     depends_on:
       - frontend
       - backend

rocket-backend/internal/server/public_handlers.go

@@ -52,7 +52,7 @@ func (s *Server) LoginHandler(c *gin.Context) {
 		return
 	}
 
-	c.SetCookie("jwt_token", tokenString, 3600*72, "/", "", false, true)
+	c.SetCookie("jwt_token", tokenString, 3600*72, "/", "", true, true)
 	c.JSON(http.StatusOK, gin.H{"token": tokenString})
 }