Completely Deploy Taiga with SSL Certificates

Taiga is an open source project management system for agile developers, designers, and project managers. Let’s see how to deploy taiga on our servers.

The easiest way to deploy taiga is to use their own official docker compose solution.

In this article assumed that your sever’s public IP is 1.2.3.4 and your domain is my.domain.com .

In order to use the docker compose, clone the repository first:

git clone https://github.com/kaleidos-ventures/taiga-docker.git

Now we should go to the repo. directory and make some changes.

cd taiga-docker

Open docker-compose.yml configuration using vim or any proper editor.

Replace all taiga-back-secret-key values to a proper secret key.

Change TAIGA_SITES_DOMAIN value to your machine’s public IP address and an open port (1.2.3.4:8000)

Add or modify other configs in the x-environment section. (for example add email host settings or PUBLIC_REGISTER_ENABLED: "Ture" and other settings which can be found here)

In the taiga-front service section, change localhost to your machine’s domain.

TAIGA_URL: "https://my.domain.com"
TAIGA_WEBSOCKETS_URL: "wss://my.domain.com"

Also add PUBLIC_REGISTER_ENABLED: "true" to taiga-front section if needed.

If you haven’t SSL certificates already, install letsencrypt and get a free one.

sudo apt install letsencryptsudo certbot certonly --standalone --agree-tos --preferred-challenges http -d my.domain.com

In the taiga-gateway service section, change exposed ports to 80 and 443 which are used for HTTP and HTTPS respectively and also mount your certificates real path (not symbolinks). after changes it must be like this:

taiga-gateway:
    image: nginx:1.19-alpine
    ports:
      - 80:80
      - 443:443
    volumes:
      - ./taiga-gateway/taiga.conf:/etc/nginx/conf.d/default.conf
      - taiga-static-data:/taiga/static
      - taiga-media-data:/taiga/media
      - /path/to/certs/:/certs
    networks:
      - taiga
    depends_on:
      - taiga-front
      - taiga-back
      - taiga-events

Save and close docker-compose.yml file.

Open taiga-gateway/taiga.conf file.

Add this line at the head of the file:

client_max_body_size 200m;

Below that, add this section:

server {
        server_name my.domain.com;
        listen 80;
        location / {
                return 302 https://$server_name$request_uri;
        }
}

A server section already exists in the file, just change some changes in its configuration section to be like this:

server {
    server_name my.domain.com;
    listen 443 ssl;    ssl_certificate /certs/fullchain.pem;
    ssl_certificate_key /certs/privkey.pem;    # Frontend
    ....

Save and close this file too.

Now tell the docker compose to run the taiga services.