SUA over https download

examples/nginx/default.conf

@@ -0,0 +1,17 @@
+server {
+    listen              443 ssl;
+    listen              [::]:443 ssl;
+    server_name         leda-bundle-server;
+    root                /usr/share/nginx/html/;
+
+    ssl_certificate     /etc/nginx/conf.d/leda-bundle-server.crt;
+    ssl_certificate_key /etc/nginx/conf.d/leda-bundle-server.key;
+    ssl_protocols       TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
+    ssl_ciphers         HIGH:!aNULL:!MD5;
+}
+server {
+    listen              80;
+    listen              [::]:80;
+    server_name         leda-bundle-server;
+    root                /usr/share/nginx/html/;
+}

examples/nginx/leda-bundle-server.crt

@@ -0,0 +1,34 @@
+-----BEGIN CERTIFICATE-----
+MIIF6zCCA9OgAwIBAgIUf5FFvJHBj5iMzjcmGf5vUDvtb6swDQYJKoZIhvcNAQEL
+BQAwgYQxCzAJBgNVBAYTAlhYMRIwEAYDVQQIDAlTdGF0ZU5hbWUxETAPBgNVBAcM
+CENpdHlOYW1lMRQwEgYDVQQKDAtDb21wYW55TmFtZTEbMBkGA1UECwwSQ29tcGFu
+eVNlY3Rpb25OYW1lMRswGQYDVQQDDBJsZWRhLWJ1bmRsZS1zZXJ2ZXIwHhcNMjMw
+NzE3MDcxMDMyWhcNMzMwNzE0MDcxMDMyWjCBhDELMAkGA1UEBhMCWFgxEjAQBgNV
+BAgMCVN0YXRlTmFtZTERMA8GA1UEBwwIQ2l0eU5hbWUxFDASBgNVBAoMC0NvbXBh
+bnlOYW1lMRswGQYDVQQLDBJDb21wYW55U2VjdGlvbk5hbWUxGzAZBgNVBAMMEmxl
+ZGEtYnVuZGxlLXNlcnZlcjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB
+AL7PDCK5qry1gzWg2KXqfFyHAhFDwLFHrsYbJC8T8wOIdxeRLCc8xKtT3YRPU/pb
+7cBMWasm4RFB1Z6fi64f0GHn5aG5K3IGC6gTuvbBqimYGkhwMrvtuAuhrS1JdtU4
+OGR8Xzdi1ISaJ21naaxbEHJF+CBm68NRo0LyjHMCWcBvXYe5eh/jU1j2gIXv36XK
+CRCyN9/aYj5WNLAQkPSt99sqNynEePmHc7ou7Tjga3CotPmga1Ep3/KPboh8nK7e
+cxeuS1O42KFC/AYTJNkctUplde4HnRwyS1rejxnmvOTCBA92wodAF5uQYX4rCXEq
+mUPNjGRj2WZMcaRPileEB/RKAsDg5brHxH0DVwPWOuOqVyIbTeatA4zwRJfzI6t5
+a+IyPrciPrD2fblXINMZ/miBEeL1zUmdwx3fESdstq8fiGJVszW0uTwWty8Q7/um
+J9t9C8nIWaHJb8AV/BSEkwRQTtVSp9BFvdPePA7U0SMqrnFvSnbqhnras03VLEWQ
+TyiCPKqLOZoe5SvPaOEaiUjHFAwADHinLNkuPj8Im045UBv8FHsUwHA3WGhzs9cT
+yhZz6pBQItvM5kQ/LjI0gFofY14FJBd9HDVqpNdLZPJIALR3ZRLrliEIvDGpLo4O
+o15eNjV50l6PY5m9iPiriUIu23QlAZHTHpbYhIhEG8lhAgMBAAGjUzBRMB0GA1Ud
+DgQWBBTQAloLYcPEQ49/rkPGBkmjjnUDmDAfBgNVHSMEGDAWgBTQAloLYcPEQ49/
+rkPGBkmjjnUDmDAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4ICAQCC
+40mIXOrZj/horLuX/tV4lGdV1rzYBXNKDzEPMJc0ShyeBPwhRXrUYaPgHwNXe/mx
+hhTDwALWxKLTBPIbqjIOnEDsbXdXjpAqL5fvUOClbYF9H2dviAzhqSDYfMcz1exp
+AwuBFyH0QJs5b/1VIKRV6Z26mPmooJRIt7+n8MiTelILSHY+1cAYz5RCE6YbhKRh
+5MKN8zgHaBs/a83iZ+VegFLPnKF0Ddkeg8N8Sw0fhdgLppTDxy6bPq1mjMzroJWB
+uEvWR21EuzcoHBycGyW5Pz9F/bftdlcoTk4DO6PJ5XnddPYk0cM5JA5ZahZ//IY/
+pGJlEgNgnalAp+McIiBNq0587BW+meCNf3SE6DD2FgZZz6P7CJIOGoIBIYyNLnsk
+Whfy8n2Y4jljleOZ/J29upPPh34Ys7Psb/3ssjN3HOeKahPlaKzZEl54zmHAZDHv
+Cvq2iDphDmiUEs7X8gfOBRrGul0h0dChJZpodMukf7YlGINY2muGZD/I7qXskccW
+DcP6DOemU1aakd9VDGUC/7rIfdEaEV6dRt8Ep0cih2bumJ8JK0gf/Z/Wb/IOuSo5
+r24s73Fpdk0lDhtTg1GvATiXPkrqotxFLL8hAvjNXWOeMoTfhm7yE9Kpp0hqGsYV
+IryHpEICWPU6oMEe9fCpopuMUX4Jnnic5xClgd0VVQ==
+-----END CERTIFICATE-----

examples/nginx/leda-bundle-server.key

@@ -0,0 +1,52 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

resources/docker-snapshot/docker-compose.yml

@@ -70,6 +70,7 @@ services:
       leda-bridge:
     ports:
       - "8080:80"
+      - "8444:443"
     healthcheck:
       test: "curl http://localhost:80"
       interval: 10s

resources/docker-snapshot/dockerfiles/Dockerfile.leda-bundle-server

@@ -17,10 +17,14 @@
 FROM nginx AS runtime 
 LABEL name="leda-bundle-server"
 
+WORKDIR /root
+
 COPY build/tmp/deploy/images/qemux86-64/sdv-rauc-bundle-full-qemux86-64.raucb /usr/share/nginx/html/
 COPY build/tmp/deploy/images/qemux86-64/sdv-rauc-bundle-minimal-qemux86-64.raucb /usr/share/nginx/html/
 COPY build/tmp/deploy/images/qemux86-64/sdv-rauc-bundle-rescue-qemux86-64.raucb /usr/share/nginx/html/
 
 COPY build/tmp/deploy/images/qemuarm64/sdv-rauc-bundle-full-qemuarm64.raucb /usr/share/nginx/html/
 COPY build/tmp/deploy/images/qemuarm64/sdv-rauc-bundle-minimal-qemuarm64.raucb /usr/share/nginx/html/
 COPY build/tmp/deploy/images/qemuarm64/sdv-rauc-bundle-rescue-qemuarm64.raucb /usr/share/nginx/html/
+
+COPY examples/nginx/* /etc/nginx/conf.d/