How to switch to an HTTPS connection

Welcome @Dylan

The default webserver in current Galaxy releases is Gunicorn. A proxy isn’t required but please be sure to review the linked guides so that you understand some of the underlying reasons why we think a proxy is a good idea!

The instructions for a standard Local Galaxy deployment are in our Admin documentation here → Scaling and Load Balancing — Galaxy Project 25.0.2.dev0 documentation


Without a proxy server:

It is strongly recommended to use a proxy server.

Gunicorn can be configured to serve HTTPS directly:

  # listening options
  gunicorn:
    # listening options
    bind: '0.0.0.0:443'
    keyfile: server.key
    certfile: server.crt

See Gunicorn’s SSL documentation for more details.

To bind to ports < 1024 (e.g. if you want to bind to the standard HTTP/HTTPS ports 80/443), you must bind as the root user and drop privileges to the Galaxy user. However you are strongly encouraged to setup a proxy server as described in the production configuration documentation.


And, if you are running the Docker Galaxy deployment instead, please find the instructions at → GitHub - bgruening/docker-galaxy: 🐋📊📚 Docker Images tracking the stable Galaxy releases..

XRef: Private Galaxy Servers

Hope this helps but let us know if you have any questions! :slight_smile: