Deploy an app and check HTTPS

Create a test service, then see Ferry get its certificate from Let's Encrypt.

Deploy. Ferry starts the service hello from the image nginx:alpine.

1 / 4

Terminal

ferry create hello --image nginx:alpine --port 80 --follow

Terminal

curl -I https://hello.apps.example.com

A new hostname gets its certificate some seconds after the proxy routes it. Until then, HTTPS answers with a self-signed certificate.

Terminal

ferry certificates

The command shows the state of each certificate.

In the server log

journalctl -u ferryd

requesting a TLS certificate for hello.apps.example.com
obtained a TLS certificate for hello.apps.example.com

The first line shows the request. The second line shows that Ferry has the certificate. TLS is the encryption of HTTPS.

Open the dashboard without a tunnel

The flag --dashboard-host serves the dashboard, the API and the webhooks on their own hostname, with HTTPS.

Size the container limits

Each container has a memory limit, a CPU limit and a process limit, thus one bad app cannot stop the server.