From 69659d6d857aa8872adc430416ba450c409102c7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Alex=20S=C3=A1nchez?= <sanchez.saez.alex01@gmail.com>
Date: Wed, 26 Aug 2026 14:14:44 -0600
Subject: [PATCH] fix[installer](proxy): speak grpcs to agent-manager and
 log-input

---
 installer/templates/front-end.go | 17 +++++++++++------
 1 file changed, 11 insertions(+), 6 deletions(-)

diff --git a/installer/templates/front-end.go b/installer/templates/front-end.go
index 8cfce565f..cba03a0be 100644
--- a/installer/templates/front-end.go
+++ b/installer/templates/front-end.go
@@ -62,7 +62,7 @@ server {
         proxy_pass $utmstack_agent_manager;
         # A self-signed certificate on an internal name: the hop is inside the
         # overlay, and what authenticates it is not being reachable from outside.
-        proxy_ssl_verify off;
+
     }
 
     location /v1/ingest {
@@ -71,32 +71,37 @@ server {
     }
 
     location /agent.AgentService/ {
-        grpc_pass grpc://$utmstack_agent_manager_grpc;
+        grpc_pass grpcs://$utmstack_agent_manager_grpc;
+        grpc_ssl_verify off;
         grpc_read_timeout 900;
         grpc_send_timeout 900;
     }
 
     location /agent.PanelService/ {
-        grpc_pass grpc://$utmstack_agent_manager_grpc;
+        grpc_pass grpcs://$utmstack_agent_manager_grpc;
+        grpc_ssl_verify off;
         grpc_read_timeout 900;
         grpc_send_timeout 900;
     }
 
     location /agent.CollectorService/ {
-        grpc_pass grpc://$utmstack_agent_manager_grpc;
+        grpc_pass grpcs://$utmstack_agent_manager_grpc;
+        grpc_ssl_verify off;
         grpc_read_timeout 900;
         grpc_send_timeout 900;
     }
 
     # log-input's ingest, whose service lives in the SDK's "plugins" package.
     location /plugins.Integration/ {
-        grpc_pass grpc://$utmstack_log_input_grpc;
+        grpc_pass grpcs://$utmstack_log_input_grpc;
+        grpc_ssl_verify off;
         grpc_read_timeout 900;
         grpc_send_timeout 900;
     }
 
     location /agent.PingService/ {
-        grpc_pass grpc://$utmstack_agent_manager_grpc;
+        grpc_pass grpcs://$utmstack_agent_manager_grpc;
+        grpc_ssl_verify off;
         grpc_read_timeout 900;
         grpc_send_timeout 900;
     }