Application security

Material Management encrypts any communication between client and application itself by default. In order to ensure this, it is necessary to provide a valid server certificate and key to the reverse proxy and service containers. This can be done by setting the corresponding environment variables properly. Keep in mind that the browser being used needs to trust the given CA (certification authority) as well in order to be able to communicate with Material Management.

TLS can be disabled by configuration. Do not consider this for production purposes.

There is a NEXEED_SERVER_TLS_ENABLED environment variable in the deployment that can be set to false to disable TLS for all services in the deployment.