From f5007cd556b939b2b28316b54d8b746c8005131c Mon Sep 17 00:00:00 2001 From: Stuart Clements Date: Mon, 21 Oct 2019 14:40:43 +0200 Subject: [PATCH] Typo and moved the http blurb --- docs/configure_https.md | 2 +- docs/installation_guide.md | 4 +--- 2 files changed, 2 insertions(+), 4 deletions(-) diff --git a/docs/configure_https.md b/docs/configure_https.md index d4e3e7cf7..215f0738c 100644 --- a/docs/configure_https.md +++ b/docs/configure_https.md @@ -4,7 +4,7 @@ Because Harbor does not ship with any certificates, it uses HTTP by default to s Harbor uses an `nginx` instance as a reverse proxy for all services. You use the `prepare` script to configure `nginx` to enable HTTPS. -You can use certificates that are signed by a trusted third-party CA, or in you can use self-signed certificates. The following sections describe how to create a CA, and how to use your CA to sign a server certificate and a client certificate. +You can use certificates that are signed by a trusted third-party CA, or you can use self-signed certificates. The following sections describe how to create a CA, and how to use your CA to sign a server certificate and a client certificate. ## Getting Certificate Authority diff --git a/docs/installation_guide.md b/docs/installation_guide.md index 8188889b4..31a57ac38 100644 --- a/docs/installation_guide.md +++ b/docs/installation_guide.md @@ -130,11 +130,9 @@ You can use certificates that are signed by a trusted third-party CA, or in you ##### optional parameters -- **http**: +- **http**: Do not use HTTP in production environments. Using HTTP is acceptable only in air-gapped test or development environments that do not have a connection to the external internet. Using HTTP in environments that are not air-gapped exposes you to man-in-the-middle attacks. - **port** : Port number for HTTP - **IMPORTANT**: Do not use HTTP in production environments. Using HTTP is acceptable only in air-gapped test or development environments that do not have a connection to the external internet. Using HTTP in environments that are not air-gapped exposes you to man-in-the-middle attacks. - - **external_url**: Enable it if use external proxy, and when it enabled the hostname will no longer used - **clair**: Clair related configs