On 2019 Jun 26 13:22:20, you wrote to me:

 >> i think your problem is here... you cannot do TLS on your http 8081
 >> port...

 Va> His configs don't look like he's trying to do that. He's doing SSL
 Va> offloading at NGINX, so SSL to Nginx, plain text internally.

apparently you and echicken were correct... i've never heard of such and
certainly never thought to attempt it... if you have a secure session from end
to end, this breaks it right in half... if you have a bad actor hiding in your
network they can easily read this unencrypted traffic if they have a foothold
in the machine... yeah, i don't think i'll be doing this any time soon... too
MitM for my tastes even though it prevents scanning and blocking of
unwanted/undesired traffic :/

)\/(ark

Always Mount a Scratch Monkey
Do you manage your own servers? If you are not running an IDS/IPS yer doin' it
wrong...
... The fact that no one understands you doesn't mean you're an artist.
---
 * Origin:  (1:3634/12.73)