XOCE and Let's Encrypt

DustinB3403

Has anyone setup XOCE to use HTTPS and Let's Encrypt preferably with CertBot for auto-renewal?

If so what process did you go through?

bnrstnr

Behind an RP, yes. I feel like that's not what you want though?

black3dynamite

Something like this for https?
https://contextneutral.com/story/creating-an-https-server-with-nodejs-and-express/?utm=medium

I’m not sure about certbot.

DustinB3403

Really either approach will work for the goal (just looking to add this as a process that people can use when setting up XOCE for their environments).

Seeing as how people using XO and XCP-ng and activity has picked up on my GH for both the installer and updater it would be cool to have this process documented.

Danp

May want to review these links --

https://github.com/vatesfr/xen-orchestra/issues/2164
https://xen-orchestra.com/forum/topic/334/fresh-build-of-xo-with-ssl-and-some-404-s

DustinB3403

@danp said in XOCE and Let's Encrypt:

May want to review these links --

https://github.com/vatesfr/xen-orchestra/issues/2164
https://xen-orchestra.com/forum/topic/334/fresh-build-of-xo-with-ssl-and-some-404-s

So this is purely for a RP, and nothing else should touch the system.

Well I guess that works.

bnrstnr

https://xen-orchestra.com/docs/reverse_proxy.html

Add this link to the readme?

Leangheng

@DustinB3403
I also looking on process to do Https with xen orchestra build from source too. Could you provide any source?

DustinB3403

@Leangheng I have this process documented on GitHub, take a look here https://github.com/Jarli01/xenorchestra_installer

DustinB3403

And this person has a full guide https://xcp-ng.org/forum/topic/3775/xen-orchestra-from-source-with-let-s-encrypt-certificates