try to enforce SSL (ZcashFoundation#83)

skyl · Feb 5, 2023 · e12a7cc · e12a7cc
1 parent 0915ee9
commit e12a7cc
Show file tree

Hide file tree

Showing 4 changed files with 18 additions and 1 deletion.
diff --git a/k8s/free2z/BUILD.bazel b/k8s/free2z/BUILD.bazel
@@ -88,6 +88,12 @@ k8s_deploy(
     template = "issuer.yaml",
 )
 
+k8s_deploy(
+    name = "frontend-config",
+    kind = "FrontendConfig",
+    template = "frontend-config.yaml",
+)
+
 k8s_deploy(
     name = "ingress",
     kind = "Ingress",
@@ -138,6 +144,7 @@ k8s_objects(
         ":config",
         ":secret",
         ":issuer",
+        ":frontend-config",
         ":ingress",
         ":service",
         # TODO: no redis yet, cleanup or go?

diff --git a/k8s/free2z/frontend-config.yaml b/k8s/free2z/frontend-config.yaml
@@ -0,0 +1,8 @@
+apiVersion: networking.gke.io/v1beta1
+kind: FrontendConfig
+metadata:
+  name: free2z-frontend-config
+spec:
+  redirectToHttps:
+    enabled: true
+    # responseCodeName: RESPONSE_CODE
diff --git a/k8s/free2z/ingress.yaml b/k8s/free2z/ingress.yaml
@@ -17,6 +17,8 @@ metadata:
     # gcloud compute addresses create free2z-prod --global
     kubernetes.io/ingress.global-static-ip-name: free2z-%{NAMESPACE}
     cert-manager.io/issuer: letsencrypt-production
+    # nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
+    networking.gke.io/v1beta1.FrontendConfig: free2z-frontend-config
 spec:
   tls:
     - secretName: free2z-ssl

diff --git a/ts/react/free2z/src/components/MBlockquote.tsx b/ts/react/free2z/src/components/MBlockquote.tsx
@@ -5,7 +5,7 @@ export default function MBlockquote(props: any) {
     return (
         <Paper
             sx={{
-                padding: "0.42em 1em",
+                padding: "0.42em 1em 0.3em 1em",
                 margin: "0.42em 0",
                 // backgroundColor,
                 // border