# Secure Canton Infrastructure - reference app

**URL:** <https://forum.canton.network/t/secure-canton-infrastructure-reference-app/5141>\
**Category:** Outreach\
**Created:** [August 29, 2022, 3:01pm UTC](https://forum.canton.network/t/secure-canton-infrastructure-reference-app/5141 "2022-08-29T15:01:53Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![nycnewman](https://yyz2.discourse-cdn.com/flex034/user_avatar/forum.canton.network/nycnewman/32/15_2.png) [@nycnewman](https://forum.canton.network/u/nycnewman)\
**Post date:** [August 29, 2022, 3:01pm UTC](https://forum.canton.network/t/secure-canton-infrastructure-reference-app/5141/1 "2022-08-29T15:01:53Z")

</div>

We’ve just published a reference app that demonstrates:

- Deploying Canton components (single domain or split sequencer, mediator and domain manager)
- Full PKI (TLS, mTLS) and JWT enforcement
- HA using open-source versions of NGINX and HAProxy
- First steps in demonstrating OCSP certificate revocation checking
- Canton Console and Daml Script versions of user and party management
- JSON API (no reverse proxy but this is in original ex-secure-daml-infra and may get ported)

> **[GitHub - digital-asset/ex-secure-canton-infra: Reference deployment of a...](https://github.com/digital-asset/ex-secure-canton-infra)**
>
> Reference deployment of a secure Canton infrastructure (PKI, JWT, HA) - GitHub - digital-asset/ex-secure-canton-infra: Reference deployment of a secure Canton infrastructure (PKI, JWT, HA)

Note: this is for reference only and not a production deployment.

Let us know what you think and what else would be interesting.