Using your own SSL Certificate

Many customers would like to replace our server certificates with their own certificates issued with the correct common name and using their company or commercial Certificate Authority (CA). 

The paths for the files that you need to overwrite are as defined in /etc/nginx/conf.d/dispatcher.conf  within the nginx docker container: 

1. /etc/nginx/server.crt 

2. /etc/nginx/server.key 

Step 1: Prepare Custom SSL Certificate

Copy the custom `server.crt` and `server.key` files to the `$HOME/ctas/` directory.

1. server_cert.crt: crt file for the new certificate 
2. server_cert.key: key file for the new certificate

Step 2: Update Docker Compose 

Update `nginx` section of the docker compose, to mount `server.crt` and `server.key`

ctasnginx:
    ---
    networks:
      - onprem
    restart: unless-stopped
    depends_on:
      - ctasdispatcher
    ---
    # add-on config
    volumes:
      - ./server.crt:/etc/nginx/server.crt
      - ./server.key:/etc/nginx/server.key
    ports:
      - "443:8443"

Step 3: Restart Containers 

cd $HOME/ctas/
docker compose -f docker-compose.yaml down
docker compose -f docker-compose.yaml up -d