Skip to main content

One post tagged with "security"

View All Tags

Deploying a Self-Hosted Temporal Cluster with mTLS, Auto-Renewing Certs and an SSO-Protected UI

· 14 min read

This is the story of standing up a production-ish Temporal cluster on a single EC2 box — where the workers authenticate over mutual TLS with certificates that renew themselves and the web dashboard sits behind single sign-on, all with exactly one inbound port open to the internet.

It's also a story about the wrong turns, because the wrong turns are where the actual learning is. If you're setting up something similar, the dead-ends below will save you an afternoon.