TLS provides encrypted and authenticated communication for HTTPS. A reverse proxy can terminate TLS, keeping certificate management out of application containers. section 20.2
A practical HTTPS setup uses:
- HTTP on port 80 returning a 301 redirect to HTTPS. section 20.2
- HTTPS on port 443 with TLS enabled in Nginx. section 20.2
- A certificate and private key loaded from the proxy filesystem; production deployments should store these confidential files as container-platform secrets. section 20.2
Local TLS with Nginx
Generate a self-signed certificate for image-gallery.local, install an SSL-enabled Nginx site configuration, reload Nginx, and browse to the HTTPS address. A browser warning is expected because the certificate is not trusted. section 20.2














