HA setup

Discussion in 'Installation/Configuration' started by limpas, Dec 15, 2023.

  1. limpas

    limpas New Member

    Hello,

    I am configuring a 3 nodes setup.
    1 node - panel
    1 node - web1
    1 node - web2 - mirror of web1
    all 3 nodes are part of a mariadb cluster.

    I had configured pacemaker to manage a Ip address resource , DRBD resource for vmail and www as indicated in this forum and apache2 resource.
    This pacemake config is only in web1 and web2 server.

    The problem that i am facing is that the apache2 ssl config of the sites does not replicate do the mirror web2.
    When i create a new site , in the web2 only apears the non ssl config.

    Of course when i try to activate the mirror server for simulate a server down in web1 the sites lose the ssl config....

    am I doing something wrong ?

    Thanks in advance
     
  2. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    You'll have to sync the SSL certificate manually between the servers.
     
  3. limpas

    limpas New Member

    The problem is not the certifcate itself but the apache2 vhost config that does not have the ssl config lines

    I am syncing the certificate files via drbd shared file system.
     
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    Which is caused by the missing SSL cert in the first place. If you use let's encrypt, then LE will issue the cert only on one server, that's why the LE cert directory must be synced if you set up a cluster setup, otherwise the other nodes can't find the SSL certs and therefore will disable SSL in the vhost as apache or nginx won't start with a SSL vhost where certs are missing.
     
  5. limpas

    limpas New Member

    yes i am using let encrypt.

    Could you please tell me the folder where the certficates are?
     
  6. limpas

    limpas New Member

    i see the problem.

    The drbd is in primary secondary , so in fact it does not see the file

    thanks for your help
     

Share This Page