HTTPS needed for an internal web app, which is accessible only when device is connected through corporate VPN?

VPN
21

I updated my original question. Got the https working. Thanks for the advice

22

Nice to know about this! Thanks

23

I was thinking of that too.

24

I also like caddy a lot https://caddyserver.com/v2

25

Security is like an onion, there are many layers. The VPN is only one layer and is “general security”, not specific to this application. Don’t rely on it. It only protects outside people getting in. It doesn’t do anything for bad actors internally (Snowden).

Setting up HTTPS is not a new thing. There are many solutions depending on the environment. There’s no excuse not to use it.