This question already has an answer here:
I created an azure VM and installed Gitlab's omnibus package in it. I'm using it as my personal git repo and a couple of my friends use it too. The problem is that is it not secure, it's using http. You can easily see the password being used in login if you monitor the http traffic using Wireshark or fiddler. I don't want to spend money to buy a certificate from a CA. Is there any other way I can secure that site?