LegumeCHOICE uses an NGINX server. A proxy server has been configured to pass requests to the API. All of the configuration for the NGINX server can be found in the default sites-enabled. On the legumeCHOICE VM, this file can be found at:
/etc/nginx/sites-available/default
The SSL certificate was obtained using letsencrypt, using this guide.
Files for public data and private data are made available using NGINX auto-index. The administrator files are secured with HTTP basic authentication. See here for how authentication was implemented, and how to add new users/passwords.