Domain and SSL

Only for DOCTAG/own on-premise instances

We recommend caddy for terminating SSL traffic and for certificate generation. Please follow the instruction to get a working installation that provides you with SSL certificates for your Doctag domain.

Please Note: It is impossible for Doctag to share a domain name with other http based services. Thus please give Doctag a dedicated subdomain e.g. doctag.your_hostname.com.

Most importantly, please make sure to have a valid DNS record pointing to the host where Doctag is running.

To setup Doctag behind a TLS terminating reverse proxy please install caddy first. Once you have caddy installed on your machine, please edit the caddy config file in /etc/caddy/Caddyfile. It shall have the following content:

doctag.your_hostname.com {
   reverse_proxy 127.0.0.1:16097
}

Please note that you have to replace doctag.your_hostname.com with the acutal hostname you want to use. Once you created that config file, you can reload caddy by executing:

sudo service caddy reload

Caddy will now automatically fetch Let’s Encrypt certificates and make sure that your Doctag instance is only accessible via TLS. The certificates will be automatically managed by caddy, so you don’t need to renew them repeatetly.

Doctag is now available behind a reverse proxy and has valid TLS certificates.