docs(checkpoint): complete checkpoint 20 - HTTPS and SSL certificates

Author: wendev27

README.md

@@ -85,8 +85,8 @@ This repository was created to:
 
 - [x] Nginx
 - [x] Reverse Proxy
-- [ ] HTTPS
-- [ ] SSL Certificates
+- [x] HTTPS
+- [x] SSL Certificates
 
 ---
 

checkpoints/checkpoint-20-https-and-ssl-certificates.md

@@ -0,0 +1,6 @@
+# # SSL certificates
+# ssl/
+
+# Or, if you prefer:
+*.key
+# *.crt

labs/networking/reverse-proxy-lab/.gitignore

@@ -9,10 +9,16 @@ services:
 
   nginx:
     image: nginx
+
     ports:
       - '8080:80'
+      - '8443:443'
+
     volumes:
+      - ./frontend:/usr/share/nginx/html
       - ./nginx.conf:/etc/nginx/conf.d/default.conf
+      - ./ssl:/etc/nginx/ssl
+
     depends_on:
       - frontend
       - backend

labs/networking/reverse-proxy-lab/compose.yaml

@@ -1,6 +1,15 @@
 server {
     listen 80;
 
+    return 301 https://localhost:8443$request_uri;
+}
+
+server {
+    listen 443 ssl;
+
+    ssl_certificate /etc/nginx/ssl/nginx.crt;
+    ssl_certificate_key /etc/nginx/ssl/nginx.key;
+
     location / {
         proxy_pass http://frontend:80;
     }

labs/networking/reverse-proxy-lab/nginx.conf

@@ -0,0 +1,24 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

labs/networking/reverse-proxy-lab/ssl/nginx.crt

@@ -124,15 +124,3 @@ Code
 - Containers
 - Pipelines
 - Deployment
-
-# avoid showing
-
-pwd
-ls
-tree .
-docker ps
-docker images
-docker network ls
-docker compose ps
-git status
-git log

resources/phase-3-cheatsheet.md

@@ -1,13 +1,13 @@
-Quick trick to make the output readable
+# Quick trick to make the output readable
 
-Only show high-severity findings:
+# Only show high-severity findings:
 
 trivy image --severity HIGH,CRITICAL my-first-image
 
-Show only the summary:
+# Show only the summary:
 
 trivy image --severity HIGH,CRITICAL --format table my-first-image
 
-Count vulnerabilities without flooding:
+# Count vulnerabilities without flooding:
 
 trivy image --severity HIGH,CRITICAL --quiet my-first-image