Updated Home (markdown)
12
Home.md
12
Home.md
@@ -12,17 +12,17 @@ cp sample.xo-install.cfg xo-install.cfg
|
|||||||
|
|
||||||
There's few different ways to enable HTTPS for Xen Orchestra.
|
There's few different ways to enable HTTPS for Xen Orchestra.
|
||||||
|
|
||||||
#### Let's Encrypt, automatically created by Xen Orchestra
|
#### ACME (eq. Let's Encrypt), automatically created by Xen Orchestra
|
||||||
|
|
||||||
Edit `xo-install.cfg` with your preferred text editor and make sure following variables are set:
|
Edit `xo-install.cfg` with your preferred text editor and make sure following variables are set:
|
||||||
|
|
||||||
```
|
```
|
||||||
LETSENCRYPT="true"
|
ACME="true"
|
||||||
LETSENCRYPT_DOMAIN="your.domain.tld"
|
ACME_DOMAIN="your.domain.tld"
|
||||||
```
|
```
|
||||||
Additionally you can set `LETSENCRYPT_EMAIL="your@email.tld"` to receive notifications related to your certificate.
|
Additionally you can set `ACME_EMAIL="your@email.tld"` to receive notifications related to your certificate.
|
||||||
|
|
||||||
Enabling Let's Encrypt overwrites some other configuration options so that it works properly, these are:
|
Enabling ACME overwrites some other configuration options so that it works properly, these are:
|
||||||
|
|
||||||
- PORT is set to 80
|
- PORT is set to 80
|
||||||
- AUTOCERT is set to true
|
- AUTOCERT is set to true
|
||||||
@@ -33,7 +33,7 @@ Certificate will be generated when XO is accessed first time from browser with d
|
|||||||
Check these if certificate generation doesn't work properly:
|
Check these if certificate generation doesn't work properly:
|
||||||
|
|
||||||
- XO instance needs to be publicly accessible with domain and ports 80/443 allowed for certificate generation to work.
|
- XO instance needs to be publicly accessible with domain and ports 80/443 allowed for certificate generation to work.
|
||||||
- If certificate/key paths were set before and there are existing files, XO won't generate a new Let's Encrypt certificate. Stop xo-server, remove/rename these files and restart xo-server.
|
- If certificate/key paths were set before and there are existing files, XO won't generate a new ACME certificate. Stop xo-server, remove/rename these files and restart xo-server.
|
||||||
|
|
||||||
|
|
||||||
#### Self-signed certificate, automatically created by Xen Orchestra
|
#### Self-signed certificate, automatically created by Xen Orchestra
|
||||||
|
Reference in New Issue
Block a user