Giters

nathany / hugo-deploy

Example deployment to S3 for Hugo blogs.

Home Page:http://hugo-deploy-example.s3-website.ca-central-1.amazonaws.com/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

End-to-end encryption

nathany opened this issue · comments

commented

Right now I'm using CloudFlare with Flexible SSL. I would like to do better, especially if I ever have any user forms on a site.

Flexible SSL: There is an encrypted connection between your website visitors and CloudFlare, but not from CloudFlare to your server.

S3 supports HTTPS, but only for subdomains without dots in them (eg. hugo-deploy but not nathany.com).

However, S3's static website hosting doesn't appear to support HTTPS.

https://hugo-deploy.s3.amazonaws.com/index.html works
https://hugo-deploy.s3-website-us-east-1.amazonaws.com doesn't resolve

commented

As far as I can tell, it's the same situation for Google Cloud Storage. And with GCS there is the question of whether or not the site would be available everywhere, as well as not having CDN $ pricing.

Amazon CloudFront may do the trick, if cache is invalidated automatically in s3up (nathany/s3up#6), but it lacks HTTP/2.

An alternative is to run Caddy on a server somewhere (Google Container Engine, Digital Ocean, Linode) with Let's Encrypt for the certs. With or without CloudFlare in front.