Graylog 3.1 docker enable web interface TLS

[Jerry (Su)]

hello, I am using graylog 3.1 docker.
recently, we want to https on the management web interface.
I did some try but got no luck, most of the docker-compose yaml file is for graylog2
I wondering how to enable TLS on the docker compose file?
my yaml:

version: ‘2’

services:

mongodb:
   restart: always
   image: mongo:3
   volumes:
      - mongo_data:/data/db

elasticsearch:

 restart: always
 image: docker.elastic.co/elasticsearch/elasticsearch-oss:6.8.2
 volumes:
   - es_data:/usr/share/elasticsearch/data
 environment:
  - http.host=0.0.0.0
  - transport.host=localhost
  - network.host=0.0.0.0
  - "ES_JAVA_OPTS=-Xms512m -Xmx512m"
 ulimits:
  memlock:
    soft: -1
    hard: -1
 mem_limit: 1g

graylog:

 restart: always
 image: graylog/graylog:3.1
 volumes:
   - graylog_journal:/usr/share/graylog/data/journal
 environment:
  # CHANGE ME (must be at least 16 characters)!
  - GRAYLOG_PASSWORD_SECRET=somepasswordpepper
  # Password: admin
  - GRAYLOG_ROOT_PASSWORD_SHA2=xxxxxxxxxxxxxxxxxxxxxx
  - GRAYLOG_HTTP_EXTERNAL_URI=http://log.domain.com:9000/
  - root_timezone=Asia/Shanghai
links:
  - mongodb:mongo
  - elasticsearch
depends_on:
  - mongodb
  - elasticsearch


ports:
  - 9000:9000
  - 1514:1514
  - 1514:1514/udp
  - 12201:12201
  - 12201:12201/udp
  - 5044:5044
  - 5044:5044/udp
  - 514:514
  - 514:514/udp

[jan (Jan Doberstein)]

first you should format your posting with proper markdown … the FAQ explains that and it will make all more readable …

You need to perform the steps that are needed for a standalone Graylog (not inside Docker). Create certificates, make them available to the Graylog inside the Docker container etc. pp.

We did not create a “switch” to enable HTTPS with a single command in the Graylog container.

[Jerry (Su)]

sorry about the format, I modified and it seems more readable.

we have the cert for graylog already, now how to “apply” it and make the container can support https ?