Updated Home (markdown)

Roni Väyrynen
2022-07-29 14:28:21 +03:00
parent e925702a00
commit d5e7ba4022

12
Home.md

@@ -12,17 +12,17 @@ cp sample.xo-install.cfg xo-install.cfg
There's few different ways to enable HTTPS for Xen Orchestra. There's few different ways to enable HTTPS for Xen Orchestra.
#### Let's Encrypt, automatically created by Xen Orchestra #### ACME (eq. Let's Encrypt), automatically created by Xen Orchestra
Edit `xo-install.cfg` with your preferred text editor and make sure following variables are set: Edit `xo-install.cfg` with your preferred text editor and make sure following variables are set:
``` ```
LETSENCRYPT="true" ACME="true"
LETSENCRYPT_DOMAIN="your.domain.tld" ACME_DOMAIN="your.domain.tld"
``` ```
Additionally you can set `LETSENCRYPT_EMAIL="your@email.tld"` to receive notifications related to your certificate. Additionally you can set `ACME_EMAIL="your@email.tld"` to receive notifications related to your certificate.
Enabling Let's Encrypt overwrites some other configuration options so that it works properly, these are: Enabling ACME overwrites some other configuration options so that it works properly, these are:
- PORT is set to 80 - PORT is set to 80
- AUTOCERT is set to true - AUTOCERT is set to true
@@ -33,7 +33,7 @@ Certificate will be generated when XO is accessed first time from browser with d
Check these if certificate generation doesn't work properly: Check these if certificate generation doesn't work properly:
- XO instance needs to be publicly accessible with domain and ports 80/443 allowed for certificate generation to work. - XO instance needs to be publicly accessible with domain and ports 80/443 allowed for certificate generation to work.
- If certificate/key paths were set before and there are existing files, XO won't generate a new Let's Encrypt certificate. Stop xo-server, remove/rename these files and restart xo-server. - If certificate/key paths were set before and there are existing files, XO won't generate a new ACME certificate. Stop xo-server, remove/rename these files and restart xo-server.
#### Self-signed certificate, automatically created by Xen Orchestra #### Self-signed certificate, automatically created by Xen Orchestra