Info | ||
---|---|---|
| ||
HostBill Enterprise installed after 2018-03-19 already have ssl configuration stored in /etc/nginx/ssl.conf |
To install valid SSL Certificate on VPS/Server where HostBill Enterprise is installed:
...
2. Edit file:
Code Block | ||
---|---|---|
| ||
/usr/local/kbkp-software/apps/b-nginx/usr/local/conf/port-80/etc/nginx/conf.d/main.conf |
Code Block | ||
---|---|---|
| ||
# vinano /usr/local/kbkp-software/apps/b-nginx/usr/local/conf/port-80/etc/nginx/conf.d/main.conf |
...
- Change server_name to domain name that you have issued the certificate for.
- Save changes
...
- Change "listen 80;" to "listen 443;"
- Add line "ssl on;"
- Provide path to your certificate and private key files like:
ssl on;
ssl_certificate /etc/ssl/your_domain_name.pem; (or bundle.crt)
ssl_certificate_key /etc/ssl/your_domain_name.key; At the very top of mentioned file add following section:
Code Block language text
...
/etc/nginx/ssl/bytecp_client.crt
With crt file you've received from your SSL issuer.
...
server { listen 80 default_server; listen [::]:80 default_server; server_name _; return 301 https://$host$request_uri; }
- Save changes
3. Edit file: /etc/nginx/locations/hostbill.conf
Code Block | ||
---|---|---|
| ||
# nano /etc/nginx/ssl/bytecp_client.key |
...
locations/hostbill.conf |
Below the line "fastcgi_pass 127.0.0.1:9000;" paste:
fastcgi_param HTTPS 'on';
4. Optionally, redirect all traffic from port 80 to 443.
To do that, add following lines at the top of /etc/nginx/conf.d/main.conf
Code Block | ||
---|---|---|
| ||
server {
listen 80 default_server;
listen [::]:80 default_server;
server_name _;
return 301 https://$host$request_uri;
} |
5. Restart webserver & php-fpm:
Code Block | ||
---|---|---|
| ||
/usr/local/kbkp-software/apps/b-nginx/etc/init.d/nginxservice nginx restart && service php-fpm restart |