⚙️Reverse Proxy

Running a reverse proxy in front of ws4sqlite is almost mandatory if you want to expose it on the internet. More than that, there are a number of reverse proxies that allow you to protect a http connection with https, using a free certificate provided for example by Let's Encrypt or similar.

Read more here.

We'll show here how to integrate with two popular solutions, Caddy and NGINX.

Caddy

To access ws4sqlite from https://sqlite.test.com:

1. Expose ports 80 and 443 of the server to which the DNS points;

2. Run ws4sqlite. Leave the port as 12321;

3. Launch caddy: sudo caddy reverse-proxy --from sqlite.test.com --to localhost:12321

You'll need to launch caddy with root/admin privileges, as it must access privileged ports.

NGINX

NGINX is quite complex to configure, and it's beyond the scope of this document. Usually, we make use of LinuxServer's Swag Docker image, paired with ws4sqlite's own docker image. The relevant config is in nginx/site-confs/default:

server {
        listen 443 ssl http2;
        server_name sqlite.test.com;
        include /config/nginx/proxy-confs/*.subfolder.conf;
        include /config/nginx/ssl.conf;
        location / {
                proxy_pass http://localhost:12321/;
        }
}