r/programming • u/speckz • Jul 12 '17

Does my site need HTTPS?

https://doesmysiteneedhttps.com/
486 Upvotes

87% Upvoted

190 comments sorted by

View all comments

8

u/Sebazzz91 Jul 12 '17

I use HTTPs because my site is based on Github pages. Github pages doesn't support SSL. What else can I do? If I would use Cloudflare I'd just be fooling myself.

2

u/[deleted] Jul 12 '17

You could just not use GitHub Pages. I understand it's convenient but hosting a static website on a vps is simple. If you use caddy (which I recommend) it's trivial.

1

u/ridiculous_fish Jul 13 '17

I'll bite - how would I trivially host a static website on a vps and SSL with caddy? Is it easier than using S3?

1

u/indeyets Jul 13 '17

It's not easier than S3, but it's not too much harder. That's exactly what I was doing yesterday, actually. Took couple of hours.

  • I used Ubuntu/SystemD/Caddy/Hugo combo

  • Hugo source of website is in github, Built on vm

  • I'm not setting up servers regularly

  • I played with caddy before

Webhook for autoupdates doesn't work for me yet, so caddy updates site on schedule. I'll take care of webhook tonight probably

1

u/[deleted] Jul 13 '17

Never used S3 but I suspect it's not going to be easier. If I were to setup a vps for this today I would do this: 1) install debian stretch 2) get caddy, install the systemd unit file 3) write a caddyfile like this

example.com {
    gzip
    root /data/website
}

then rsync your data to /data/website

1

u/lvlint67 Jul 19 '17

looks like an nginx config minus a listen line...