From 2df4a77f041d5a07de4366a5cd91b6d879cf3d7a Mon Sep 17 00:00:00 2001
From: MickLesk <mickey.leskowitz@gmail.com>
Date: Tue, 12 May 2026 21:59:02 +0200
Subject: [PATCH] fix: update Colanode setup for SSL support and modify
 documentation for Web UI access

---
 ct/colanode.sh              | 2 +-
 install/colanode-install.sh | 6 +++++-
 json/colanode.json          | 2 +-
 3 files changed, 7 insertions(+), 3 deletions(-)

diff --git a/ct/colanode.sh b/ct/colanode.sh
index e08721b9..1d247830 100644
--- a/ct/colanode.sh
+++ b/ct/colanode.sh
@@ -75,5 +75,5 @@ description
 msg_ok "Completed Successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
 echo -e "${INFO}${YW} Access it using the following URLs:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:4000${CL} (Web UI)"
+echo -e "${TAB}${GATEWAY}${BGN}https://${IP}:4000${CL} (Web UI - self-signed cert)"
 echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:3000${CL} (API Server)"
diff --git a/install/colanode-install.sh b/install/colanode-install.sh
index b06b9048..af03bb65 100644
--- a/install/colanode-install.sh
+++ b/install/colanode-install.sh
@@ -51,13 +51,17 @@ EOF
 msg_ok "Configured Application"
 
 msg_info "Configuring Nginx"
+create_self_signed_cert "colanode"
 cat <<EOF >/etc/nginx/sites-available/colanode
 server {
-    listen 4000;
+    listen 4000 ssl;
     server_name _;
     root /var/www/colanode;
     index index.html;
 
+    ssl_certificate /etc/ssl/colanode/colanode.crt;
+    ssl_certificate_key /etc/ssl/colanode/colanode.key;
+
     location / {
         try_files \$uri \$uri/ /index.html;
     }
diff --git a/json/colanode.json b/json/colanode.json
index f02077c1..c5a184ed 100644
--- a/json/colanode.json
+++ b/json/colanode.json
@@ -33,7 +33,7 @@
     },
     "notes": [
         {
-            "text": "Web UI is available on port 4000. Connect it to the API server at http://YOUR_IP:3000 from within the app.",
+            "text": "Web UI is available at https://YOUR_IP:4000 (self-signed certificate — accept the browser warning). Connect it to the API server at http://YOUR_IP:3000 from within the app.",
             "type": "info"
         },
         {