working SAML

SSLProxy/Dockerfile

@@ -0,0 +1,19 @@
+FROM nginx:alpine
+
+# Create directories for SSL certificates
+RUN mkdir -p /etc/ssl/certs /etc/ssl/private
+
+# Copy SSL certificates
+COPY nginx.crt /etc/ssl/certs/
+COPY nginx.key /etc/ssl/private/
+
+# Set proper permissions for private key
+RUN chmod 600 /etc/ssl/private/nginx.key
+
+# Copy nginx configuration
+COPY nginx.conf /etc/nginx/nginx.conf
+
+# Expose HTTPS port
+EXPOSE 7009
+
+CMD ["nginx", "-g", "daemon off;"]

SSLProxy/docker-compose.yaml

@@ -0,0 +1,9 @@
+version: '3.8'
+
+services:
+  ssl-proxy:
+    build: .
+    ports:
+      - "7009:7009"
+    restart: unless-stopped
+    network_mode: host

SSLProxy/nginx.conf

@@ -0,0 +1,30 @@
+events {
+    worker_connections 1024;
+}
+
+http {
+    upstream backend {
+        server localhost:15607;
+    }
+
+    server {
+        listen 7009 ssl;
+        server_name localhost;
+
+        ssl_certificate /etc/ssl/certs/nginx.crt;
+        ssl_certificate_key /etc/ssl/private/nginx.key;
+
+        ssl_protocols TLSv1.2 TLSv1.3;
+        ssl_ciphers HIGH:!aNULL:!MD5;
+        ssl_prefer_server_ciphers on;
+
+        location / {
+            proxy_pass http://backend;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto https;
+            proxy_redirect off;
+        }
+    }
+}

SSLProxy/nginx.crt

@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

SSLProxy/nginx.key

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----
+MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQC5OVvojikwTCPw
+BffZRylnU1H/FMK2bX/+Ixt5N5jRi3uzaA0Kxmr/pttZteM1WbwJd8YHaDYkhaCb
+8pPY/GNnH/moHxXVg4sG0o3y7UQ4cdq8vSGZg63f1zST4K+XVC9dwpREbvt6ZOQf
+pJFPgie3e7bq178ISd862trec7dgrkdR0jGAAZ4UV+2sPx/6kGiyAgPR4XwXtQ0T
+0rf2L8zyi8aXz6h+Xk8TciAoT2/Z858+4uXT5npl//rjw+P8435PcVySuBP2k0d6
+yOmpNxi6jED9AhMP+ipuft1+GGCpyUaZtmIkxmMapQtgXY5RFcV3C0L+cvsVdJ+j
+pUvhycZlAgMBAAECggEAChzv3/dtF8o8dxU4VlhskgvqUPFW/UNmxt8vV5O5yA0j
+1KSUe7dgLbO0S8Zi0K2k1uZ/fTWLKTzTi1g4CtOi8MU96hhCZq0/OMDjx7T9MdDD
+luUDseBO7McRA5bzt2E9EdM3KbJekCz0iKbBWVQ7q2i5kMJ1V3RDGDFNXHJ4e3KI
+gbBjB13czQLyCL2hUFNiehJqy18CvBFWfjWaI33xfw2VdW1BHtbhTbXqELOwGMyy
+SKbcwJxJ3/xcF+vCuqqfZVITIUMAhS6vJ1l7IOp7k9KslXgZU2+5Y9fGRoCxu8/x
+pjkguG+3ZGPxUXFIFoCsccY25V7dV0ZPZviTh1zLOQKBgQD77SEIu9y4So0wQ4jX
+okTgkjsIoLnqEFBH5njpqJAXfJi5whkJYK0LIjTd1F+p29c0/YH1iI/BOzJ1nRY1
+6xQHgDMg/pXhQR8x2QE3iHUSDZu3X2aRz4AJJBsXIOvsrfsH22lmPfeCumCbCHLU
+ZFLUExNOxZpO6Hl8Oy9OnOfQ/QKBgQC8OBw55ovfTgEcDC1F7vgSmXG/Mz5HIqDq
+e88l2QCY5bZYQjYk6cmmxeLl4rN+oQet7amZB/7jEmzucU+SYzOaOkGUtymZvGV7
+xoswiNh0lH1S21qqXm6o5W4od0DcnYRFoqWzp/Y4PdS+p+Ut8qUmHyZ/p2p2ePMB
+Z6PCW4VbiQKBgQDUAoZnZDnm+g6BzIPv/IZ8e3Ok2iY7fckiCSo+cXX53ghlY5xQ
+UQSvtvTIrn5nYzRkSufAq1FXa6sWYcGcVJ5BhbkBjl6x92z6NUaZ5oOnUr51/ppC
+IV790l3eA/2n6+6zeQnlWkbexFyie+SvK1KtWPRJuXAX8fqy+tfgD5njPQKBgQCH
+irSw8ZiKn+bmptI3iWa2JjAmq6VOnt5Y3f4H2GS4trwAhPXu0Tk5U0oZmI8AQsB/
+/SVkIcDpDwzJDWprFetERm2RxfE8V9KRNyJnOjT+hyxU7cg15jk0gbw5gd+AwCJP
+71f6r5r9V3GMNuYwl4tcj5Qu24YseN8uhM8GGNhJWQKBgB0zUIFt04NHy8xydjzn
+uGFjel56SLbp7eD4nvP8Oc1BmBJp1coEJ1E4YgQZ8Ps4JPiMY+P0txBC7hqWrQGI
+itIZiMsMVoQfCJ2Odbdi9yAvDQCtZ7oJZv7zrupTfsfK3zS7GtxysC+PQ5KcvifF
+tCtCJW9Uao2thEz5InDBuMXK
+-----END PRIVATE KEY-----