Cloud Deployment outside access

[cervalx]

I have been using iBeam on a local server and now I have moved everything in the cloud on digitalocean. I would like to create a secure connection from a frontend app.

I guess the use-case described in the wiki is to access port 5000 locally and do not expose it.

What I tried:
Generate certificate for gateway and turn CCP: true.
Expectation: gateway to force only secure connection.
Reality: this did not force secure connections, when I do curl -k I still get a response

What I am looking into now: mTLS + reverse proxy using nginx, where 2 certificates are used to connect to a secured port, then data is relayed internally from that secured port to port 5000.

Does anyone have any experience with this?