Skip to main content

SSL Support

The API service looks for a certificate at configs/base/www-api.crt and the corresponding key configs/base/www-api.key. If they exist the api will listen on port 443 for TLS-encrypted requests.

Use the provided script to generate a self-signed certificate.

Enable SSL web api​

  1. Generate a certificate
D=./ ./api/scripts/generate-certificate.sh
  1. Restart api container
docker compose restart api # (or restart api-virt if using the virtualized network variant)

  1. Verify the SSL service is running
curl -k https://127.0.0.1
  1. Open port 443 for WAN access (optional)

NOTE This is not recommended if running SPR on the internet.

echo "UPSTREAM_SERVICES_ENABLE=1" >> configs/base/config.sh
docker compose restart api # (or restart api-virt if using the virtualized network variant)