Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

LetsEncrypt #26

Closed
zeLostchild opened this issue Jun 26, 2019 · 2 comments
Closed

LetsEncrypt #26

zeLostchild opened this issue Jun 26, 2019 · 2 comments
Labels
configuration-support Configuration/Support Related

Comments

@zeLostchild
Copy link

I am having trouble understand how to add https, with the link that is given. I am a complete novice with docker. Are there any simpler alternatives? Or possibly a guide with step by step instructions?

@ned-kelly ned-kelly added the configuration-support Configuration/Support Related label Jun 27, 2019
@ned-kelly
Copy link
Owner

The easiest option is going to be setting up a reverse proxy (such as Caddy) in front of your Libretime installation, and then proxy passing to the Libretime docker container:

Example Caddyfile:

radio.<your-domain>.com {
  gzip
  log stdout
  errors

  proxy / http://<ip-of-libretime>:8882 {
    transparent
    websocket
    insecure_skip_verify
    header_upstream Host {host}
    header_upstream X-Real-IP {remote}
    header_upstream X-Forwarded-For {remote}
    header_upstream X-Forwarded-Proto {scheme}

    header_upstream Accept-Encoding identity
  }
}

Replace: <ip-of-libretime> with the IP of the host running the libretime docker container -- If it's the same host as the Caddy Docker container, you can use an internal docker container name here - or if unsure, just specify the libretime host's IP (if you're using the host network mode in docker).

@zeLostchild
Copy link
Author

zeLostchild commented Jul 1, 2019

When I login from the actual ip it works or when it is not using https.

I tried a using certbot with apache and well... this is essentially what I got when I try in login an error occurs. (I can still use IP address to login)

Here is my apache .conf file

<IfModule mod_ssl.c>
<VirtualHost *:443>
   ProxyPreserveHost On
   ServerName pond.mydomain.org
     ProxyPass / http://0.0.0.0:8882/
     ProxyPassReverse / http://0.0.0.0:8882/

Include /etc/letsencrypt/options-ssl-apache.conf
SSLCertificateFile /etc/letsencrypt/live/pond.mydomain.org/fullchain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/pond.mydomain.org/privkey.pem
</VirtualHost>
</IfModule>

Also I have EXTERNAL_HOSTNAME=pond.mydomain.org for libretime.

Is there something that i need to add to the apache2 .conf file

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
configuration-support Configuration/Support Related
Projects
None yet
Development

No branches or pull requests

2 participants