added mtls for device endpoints

docker-compose.yaml

@@ -36,20 +36,6 @@ services:
     networks: 
       - snoopBack
 
-  vault:
-    image: hashicorp/vault:1.16
-    environment:
-      VAULT_API_ADDR: http://0.0.0.0:8200
-      VAULT_TOKEN: root
-    ports: 
-      - 8200:8200
-    cap_add: 
-      - IPC_LOCK
-    volumes:
-      - vault-data:/vault/data
-    networks: 
-      - snoopBack
-
   snoop-api:
     restart: unless-stopped
     build:
@@ -93,8 +79,14 @@ services:
       - snoop-api
     ports:
       - "80:80"
+      - "443:443"
     volumes:
       - ./nginx/dev.conf:/etc/nginx/conf.d/default.conf:ro,Z
+      # - ./nginx/nginx_ssl/fullchain.pem:/etc/nginx/ssl/certs/fullchain.pem
+      # - ./nginx/nginx_ssl/privkey.pem:/etc/nginx/ssl/certs/privkey.pem
+      - ./nginx/nginx_ssl:/etc/nginx/ssl/certs/:ro,Z
+      - ./nginx/nginx_ssl/iot_int_cert.pem:/etc/nginx/ssl/iot_int_cert.pem:ro,Z
+      - ./nginx/nginx_ssl/iot.crl:/etc/nginx/ssl/iot.crl:ro,Z
     networks:
       - proxy
 
@@ -162,8 +154,9 @@ services:
 volumes:
   pgdata:
   miniodata:
-  vault-data:
   mediamtx-recordings:
+  emqx-data:
+  emqx-log:
 
 networks:
   proxy: