Webmail on subdomain with Let's Encrypt SSL
- Thread starter Trickster
- Start date
in the user panel of the domain, you have to select the Webmail entry.
Thanks for replying!
I tried that, but there's no Webmail entry available. Also, the config made all my websites to go down.
So I did as posted in the original post - the tutorial at https://help.directadmin.com/item.php?id=92 and the rest I followed step-by-step. After getting fails (Debug mode. Level 10 dataskq: command: action=rewrite&value=httpd), there's few things I started thinking:
1. The configs are almost identical to the one in tutorial. Why make another config?
2. Does spamming almost identical configs twice make my sites crash? I mean there's the tutorial one and and this.
3. I am seeing: httpd: Syntax error on line 215 of /etc/httpd/conf/httpd.conf: Syntax error on line 1 of /etc/httpd/conf/extra/directadmin-vhosts.conf: Syntax error on line 113 of /usr/local/directadmin/data/users/admin/httpd.conf: </VirtualHost>[/COLOR] without matching <VirtualHost>[/COLOR] section. -Why is there a COLOR option? Does the script find ssl enabled domains based on color?
Oh well, time to call it for today and start poking again tomorrow.
if you don't see it. you might not have an A Record in DNS for webmail and or haven't set the letsencrypt list up with webmail in the directadmin.conf
OPTIONS in the directadmin.conf,
letsencrypt_list=www:mail:ftp
op:smtp:webmail <<< add hereletsencrypt_list_selected=www:webmail <<< add here. whatever you put here will be automatically seleted in the user area..
by using a custom config
/usr/local/directadmin/data/templates/custom/virtual_host2.conf.CUSTOM.4.post
It won't get overwritten by
Code:
./build rewrite_confI think you copied/pasted from the website and got HTML tags in the config
Thanks, I'll try these.if you don't see it. you might not have an A Record in DNS for webmail and or haven't set the letsencrypt list up with webmail in the directadmin.conf
OPTIONS in the directadmin.conf,
letsencrypt_list=www:mail:ftp
letsencrypt_list_selected=www:webmail <<< add here. whatever you put here will be automatically seleted in the user area..
by using a custom config
/usr/local/directadmin/data/templates/custom/virtual_host2.conf.CUSTOM.4.post
It won't get overwritten byCode:./build rewrite_conf
I think you copied/pasted from the website and got HTML tags in the config
And to be clear, these COLOR codes should not be added either? And if not, why is there such added in the code snippet?
Code:
letsencrypt_list=www:mail:ftp
op:smtp:webmailIf you want to apply it by default, add the following line to the directadmin.conf to:
Code:
letsencrypt_list_selected=www:webmail
Ok, so after removing the extra COLOR etc scrap the forum software yielded, I was able to create the certificate successfully. The https:://webmail.domain.com works as intended. However, the https redirect does not work (http://webmail.domain.com only reports "too many redirects"). So the this HOWTO is missing the adequate http to https redirect.
.htaccess redirect did not work for my setup.
I did the rewrite rule by editing the virtual_host2.conf.CUSTOM.4.post.
<VirtualHost |IP|:|PORT_80| |MULTI_IP|>
ServerName webmail.|DOMAIN|
Redirect / https://webmail.|DOMAIN|
It works for me, but the best practice would include the "if" cond for ^/((?!.well-known) so when requesting a new certificate, it would to use http when matching .well-known folder request.
Edit: I wish all the automatic smileys, color tags etc would be removed from the BBS to avoid config errors.
.htaccess redirect did not work for my setup.
I did the rewrite rule by editing the virtual_host2.conf.CUSTOM.4.post.
<VirtualHost |IP|:|PORT_80| |MULTI_IP|>
ServerName webmail.|DOMAIN|
Redirect / https://webmail.|DOMAIN|
It works for me, but the best practice would include the "if" cond for ^/((?!.well-known) so when requesting a new certificate, it would to use http when matching .well-known folder request.
Edit: I wish all the automatic smileys, color tags etc would be removed from the BBS to avoid config errors.
Richard G
Verified User
Smilies are nice on a forum. You might want to learn to use code tags for codes as are present on all forum systems.
You probably didn't add the RedirectMatch line
Code:
<VirtualHost |IP|:|PORT_80| |MULTI_IP|>
ServerName webmail.|DOMAIN|
ServerAdmin |ADMIN|
RedirectMatch 301 ^/((?!.well-known).*)$ http://webmail.|DOMAIN|/$1
DocumentRoot /var/www/html/roundcube
CustomLog /var/log/httpd/domains/|DOMAIN|.bytes bytes
CustomLog /var/log/httpd/domains/|DOMAIN|.log combined
ErrorLog /var/log/httpd/domains/|DOMAIN|.error.log
</VirtualHost>OK, I have done it all (i think)
Can someone tell what i have to do now?
- I have added webmail into the NDS settings
- I have added webmail into apache and nginx files
- The webmail.domain.xxx redirection is working
- I have generated new SSL certificates with LetsEncrypt
- I have rewritten the configs
- I have set de ssl=1 variable
Can someone tell what i have to do now?