Enabling https for stanalone runtime app server

[rsmahmud]

What I’m trying to do:
Enable https for standalone app server

Why I’m doing this
I’ve read on this forum that when you’re using anvil standalone app server remember login session only works if you give an origin parameter starting with https followed by FQDN

Here is some details about my environment:

Platform: Vmware ESXi
OS: Ubuntu 20.04
IP: 10.71.11.XX
Hostname: sub

#provided in config.yaml
origin: "https://sub.domain.com"

#OS firewall is disabled and 443 is open

#confugred with domain registrar
sub.domain.com points to --> real-ip:3030 

#configured port forwarding
real-ip:3030 points to --> 10.71.11.XX:3030

when run with this config traefik fails to get SSL certificate from lets encrypt for my FQDN

app works fine without https in config.yaml

Please forgive my ignorance…

maybe It only works if my app server has a real ip and subdomain pointing directly to it?

maybe my i need to port forward like this?

real-ip:3030 → local-ip:443

or maybe like this?

real-ip:443 → local-ip:443

which i can not do because real-ip:443 is already used.

How should i update my setup to make it work?

Has anyone else had issue with enabling https for their standalone app server?

[Tony.Nguyen]

You might try this first. It is the easiest way to set up https for the server, I need to do try and error million times before it works:

The open source Anvil - Let's Encrypt and cloudflare

It took me a while to find out how to make https works with Open source Anvil and Cloudflare First, you need to set A record of DNS management to the IP of the server. Run anvil-app-server --app api --origin https://you_domain.com --letsencrypt-staging Ignore error 403 or 400, access your domain https://you_domain.com Change cloudflare SSL/TLS encryption mode to Full [image] Good luck

After that, you can try your own configuration.

However, you might face this issue after that:

[Bug] [Anvil App Server v1.6.5] anvil.users.force_login and anvil.users.login_with_email

Hi @meredydd, I follow these steps: 1. Clone the app here: Anvil Docs | Custom user authentication On the client side, change this anvil.users.login_with_email(d.email_box.text, d.password_box.text, remember=True) to this anvil.server.call('my_login',d.email_box.text, d.password_box.text) server side code: @anvil.server.callable def my_login(email, password): user = app_tables.users.get(email = email) if user is not None: user['confirmed_email'] = True anvil.users.l…

[jon1]

@rsmahmud Were you able to resolve your issue? I’m running into a similar problem. For at least our QA server, I would like to host multiple anvil-runtime containers (each with a different application and sub-domain combination) behind an nginx reverse proxy configured with Let’s Encrypt SSL certs.

Our application doesn’t run properly with any combination of origin URL and reverse proxy from nginx that we’ve tried thus far. If we go directly to the :3030 port of the anvil-runtime it functions correctly.

Using the proxy we see this: