Mission Brief

Plain text communication is loud. It’s bleeding data.
Prying eyes can see every bit in the wire.

You have to isolate the backend – the Semaphore UI and MySQL containers stay locked down. Unreachable for the external work.
Open a tiny hole on the stronghold to the world – the frontend is an NginX SSL proxy.

You use:

• Podman pod for network and container isolation
• The Semaphore and MySQL containers without exposing them to the world
• An NginX proxy container with SSL

Continue reading “Protecting The Wire – Semaphore Behind SSL Proxy” →