NAT VPS, letsencrypt and so on

eltrasimacoeltrasimaco
in Technical

Searched this category and googled for some time but no cigar. The question: Is the some guide where I can learn how to host a website in a NAT VPS (using a domain name) and can use https with letsencrypt?
thanks in advance

Comments

  • elliotcelliotc OG

    You can use acme.sh for letsencrypt.

    host a website in a NAT VPS

    Listen to ipv6 or setup haproxy if your provider have one.

    Action and Reaction in history

  • AlwaysSkintAlwaysSkint OG

    @elliotc said: or setup haproxy if your provider have one

    And go greyer than me in the process. ;)

    Thanked by (1)Ympker

    It wisnae me! A big boy done it and ran away.
    NVMe2G for life! until death (the end is nigh)

  • AbdullahAbdullah Hosting ProviderOG

    Use the IPv6 and port 80 for httpd.
    Cloudflare provides IPv4 to IPv6 reverse proxy.

    Cloudflare runs a free IPv6 to IPv4 proxy with their service. Cloudflare's CDN normally works on a reverse proxy (you publicly see a Cloudflare IP for your site, while it proxies your actual IP to load your site).

    Steps:
    1) Signup for a free account at cloudflare.com and add your domain (you can add as many as you want)
    2) Update your domain's name servers at your registrar to the ones Cloudflare supplies (.ns.cloudflare.com)
    3) Edit your Cloudflare DNS records, create & point your domain/subdomain's quad-A (AAAA) record to one of your LES IPv6 Addresses (see your welcome email with your VPS info)
    4) Make sure you have "Cloudflare On" for the domain/subdomain record you just setup (make sure the little cloud icon is orange next to the record)
    5) Head into your "Cloudflare Settings" for your domain - select the gear icon next to your domain in the main domain list
    6) Scroll down and under 'Automatic IPv6' change the default mode 'Safe' to 'Full'
    7) Modify your web server to listen on the IPv6 address you used above, on port 80 of course

    Copied from the other place.

    https://webhorizon.net

  • mikhomikho AdministratorHosting ProviderOG

    If you get a NAT VPS from [mrvm.net] you can use the domain forwarding option to host both http and https site.

    All you need to do is to handle the renewel of your Lets Encrypt Cert as you would on any regular IPv4 VPS.

    Thanked by (2)Abdullah PHP_Backend

    https://clients.mrvm.net

  • RahulRahul OG
    edited April 2020

    @mikho said: If you get a NAT VPS from [mrvm.net] you can use the domain forwarding option to host both http and https site.

    Was there any hiccup in the beginning with the setup, https sites with Lets Encrypt Cert like broken cert ?

  • mikhomikho AdministratorHosting ProviderOG

    @Rahul said:

    @mikho said: If you get a NAT VPS from [mrvm.net] you can use the domain forwarding option to host both http and https site.

    Was there any hiccup in the beginning with the setup, https sites with Lets Encrypt Cert like broken cert ?

    The only hiccup is when some customers try to use TCP or HTTP(s) forward to other ports then 80/443.
    This could end up messing up the config file and then HAProxy fails to reload it.
    Keeping the old config and that requires my hands to fix it.

    Thanked by (1)Iroshan464

    https://clients.mrvm.net

  • feiefeie
    edited April 2020

    use DNS record, do not use HTTP
    https://letsencrypt.org/how-it-works/#domain-validation

    https://github.com/acmesh-official/acme.sh/wiki/dnsapi

Sign In or Register to comment.

© LowEndSpirit 2024

ipv6 ready