roundcube ssl

Discussion in 'Installation/Configuration' started by edopol, May 25, 2020.

  1. edopol

    edopol Member

    I installed the perfect debian 10 nginx etc on the new server, I just have the problem that roundcube does not go in ssl, the server address.ltd:8081/webmail does not go in https: // ...
    some idea???
     
  2. Taleman

    Taleman Well-Known Member HowtoForge Supporter

    How did you set up certificates for Roundcube?
    @ahrasis has written Tutorial on how to setup certificates for ISPConfig and services running on ISPConfig host.
    https://www.howtoforge.com/tutorial/securing-ispconfig-3-with-a-free-lets-encrypt-ssl-certificate/#b-for-dovecot-note-this-shouldnt-exist-together-with-courier
    Does certificate exist is you write URL with HTTPS://?
    Have you set on the Redirect tab of that website redirect http to https?
     
  3. edopol

    edopol Member

    it's just the guide I followed for the certificates, and they work, I wasn't sure with the 8081 port, considering that the 8080 goes in https: //, now you have removed the doubt from me, thank you very much
     
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    The apps vhost on port 8081 has no ssl by default.
     
  5. tfboy

    tfboy Member

    I did this on my nginx install with a Let's Encrypt certificate, modify to suit your needs
    /etc/nginx/sites-enabled/000-apps.vhost
    Code:
    server {
    #        listen 8081;
    # added for SSL
            listen *:8081 ssl;
                    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
            listen [IPv6 address]:443 ssl; # if using IPv6
            ssl_certificate /etc/letsencrypt/live/address.ltd/fullchain.pem;
            ssl_certificate_key /etc/letsencrypt/live/address.ltd/privkey.pem;
            server_name address.ltd www.address.ltd;
    # end of addition for SSL
    
    edited to add that the above will be lost if/when you do an ispconfig update as the apps.vhost file might be overwritten.
     
    Last edited: May 26, 2020

Share This Page