-
Similar Content
-
By juca
Hi,
I was wondering if it possible to specify different custom configurations for HTTP and HTTPS traffic.
I have a couple of sites that would need to keep HTTP traffic active. Basically what I would like to do is the following:
for HTTP:
ProxyPreserveHost On ProxyRequests off ### HTTP Proxy AllowCONNECT 443 563 ProxyPass / http://localhost:16080/ ProxyPassReverse / http://localhost:16080/
for HTTPS:
###SSL Proxy ProxyPreserveHost On ProxyRequests off SSLProxyEngine on SSLProxyVerify none SSLProxyCheckPeerCN off SSLProxyCheckPeerName off SSLProxyCheckPeerExpire off ProxyPass / https://localhost:16443/ ProxyPassReverse / https://localhost:16433/ is this possible?
-
By d00p
Dear Froxlor Commuity,
finally - the first release candidate of our new API based version 0.10.0! A lot of work has gone into this, many internal changes (you might miss any frontend-changes, but be patient...) most importantly the API backend which not only is used by froxlor frontend itself but can also be uses from within your website/scripts/etc.
Froxlor now uses composer to include some of its requirements like phpMailer, Logger, IdnaConvert and TwoFactorAuth libraries.
Here are some of the new features besides API that found their way in:
- 2FA / TwoFactor Authentication for accounts - MySQL8 compatibility - new implementation of Let's Encrypt (acme.sh) - customizable error/access log handling for webserver (format, level, pipe-to-script, etc.) - lots and lots of bugfixes and small enhancements You can see all changes on Github at https://github.com/Froxlor/Froxlor/compare/0.9.40.1...0.10.0-rc2
Download: 0.10.0-rc2
Note: There will be no Debian packages for release-candidates.
Visit http://www.froxlor.org or join our IRC channel #froxlor on irc.freenode.net.
Thank you,
d00p
-
By j4mb4l4j4
Hallo, ich hätte eine Frage da ich aktuell in folgendes Problem laufe.
Froxlor version: 0.9.39.5 (DB: 201805290)
Meine Domains bekommen aktuell keine neuen Zertifikate mehr, da der Cronjob der die Letsencrypt Zertifikate erzeugt einen Fehler wirft.
Gemäß Syspanel bekomme ich die Meldung (customer = mein Kunde, my.domain.com = meine Domain):
25.03.19 18:51:38 error customer Could not get Let's Encrypt certificate for my.domain.com: Curl: Unknown SSL protocol error in connection to acme-v02.api.letsencrypt.org:443 25.03.19 17:48:28 error froxlor.panel Could not get Let's Encrypt certificate for my.domain.com: Curl: Unknown SSL protocol error in connection to acme-v02.api.letsencrypt.org:443 25.03.19 17:35:04 error customer Could not get Let's Encrypt certificate for my.domain.com: Curl: Empty reply from server 25.03.19 16:47:52 error froxlor.panel Could not get Let's Encrypt certificate for my.domain.com: Curl: Unknown SSL protocol error in connection to acme-v02.api.letsencrypt.org:443 25.03.19 16:43:53 error froxlor.panel Could not get Let's Encrypt certificate for my.domain.com: Curl: Empty reply from server 25.03.19 16:43:53 error customer Could not get Let's Encrypt certificate for my.domain.com: Curl: Unknown SSL protocol error in connection to acme-v02.api.letsencrypt.org:443 25.03.19 16:30:27 error froxlor.panel Could not get Let's Encrypt certificate for my.domain.com: Curl: Empty reply from server 20.03.19 16:55:42 error froxlor.panel Could not get Let's Encrypt certificate for my.domain.com: Curl: Could not resolve host: acme-v02.api.letsencrypt.org 20.03.19 16:50:50 error customer Could not get Let's Encrypt certificate for my.domain.com: Curl: Could not resolve host: acme-v02.api.letsencrypt.org 20.03.19 16:50:20 error froxlor.panel Could not get Let's Encrypt certificate for my.domain.com: Curl: Operation timed out after 0 milliseconds with 0 out of 0 bytes received 09.03.19 16:12:36 error customer Could not get Let's Encrypt certificate for my.domain.com: Curl: Empty reply from server 09.03.19 14:52:02 error customer Could not get Let's Encrypt certificate for my.domain.com: Curl: Empty reply from server 01.03.19 14:54:10 error customer Could not get Let's Encrypt certificate for my.domain.com: Curl: Unknown SSL protocol error in connection to acme-v02.api.letsencrypt.org:443 01.03.19 05:30:01 error customer Could not get Let's Encrypt certificate for my.domain.com: Curl: error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert internal error Leider bekomme ich wenn ich folgenden Befehl ausführe auch keine Meldung, es hängt einfach und passiert nix:
root@server:/var/run# php -q /var/www/my.domain.com/scripts/froxlor_master_cronjob.php --letsencrypt --debug [information] Updating Let's Encrypt certificates [information] Updating my.domain.com [information] letsencrypt-v2 Using 'https://acme-v02.api.letsencrypt.org' to generate certificate [information] letsencrypt-v2 Using existing account key [information] letsencrypt-v2 Starting certificate generation process for domains [information] letsencrypt-v2 Requesting challenge for my.domain.com Leider sehe ich keine weitere Möglichkeit zum Debugging.
Wo müsste ich ansetzen um mehr Logs zu bekommen, bzw. kennt jemand den Fehler und kann mir sagen was ich falsch mache ?
Irgendwie verstehe ich nicht was das Problem ist.
Auf einem anderen Server mit anderer IP und Froxlor habe ich genau das gleiche Problem.
Ich kann erfolgreich pingen und telnetten:
root@server:/var/run# telnet acme-v02.api.letsencrypt.org 443 Trying 2a02:26f0:eb:186::3a8e... Connected to e14990.dscx.akamaiedge.net. Escape character is '^]'. ^CConnection closed by foreign host.
-
By irisdina
Warning, this is not an official guide!!!
1.
sudo mv /etc/apt/source.list /etc/apt/source.list.bak 1a. Create new Source.list
sudo nano /etc/apt/source.list 1b. insert (for Debian Stretch)
1.2B (for Ubuntu Cosmic)
1c.
sudo apt update && sudo apt dist-upgrade && sudo apt autoclean && sudo apt autoremove 1d.
sudo apt install curl wget apt-transport-https dirmngr git software-properties-common Now you can start setting up your server
2. MariaDB install
Warning use sudo command für this install!
sudo apt install mariadb-server mariadb-client 2a. MariaDB 10.3 Workround (Optional)
3. nginx install
sudo apt install nginx 3a.
mkdir /etc/nginx/sites-available mkdir /etc/nginx/sites-enabled 3b. nano /etc/nginx/nginx.conf
4. PHP install
sudo apt-get -y install php7.3-fpm php7.3-mysql php7.3-curl php7.3-gd php7.3-intl php-pear php-imagick php7.3-imap php-memcache php7.3-pspell php7.3-recode php7.3-sqlite3 php7.3-tidy php7.3-xmlrpc php7.3-xsl php7.3-mbstring php-gettext php7.3-mysql php7.3-curl php7.3-gd php7.3-intl php-pear php-imagick php7.3-imap php-memcache php7.3-memcached php7.3-pspell php7.3-recode php7.3-sqlite3 php7.3-tidy php7.3-xmlrpc php7.3-xsl php7.3-mbstring php-gettext php7.3-fpm php7.3-cli php7.3-cgi php-bcmath php-zip php7.3-fpm php7.3-curl php7.3-gd php7.3-mysql php7.3-mbstring php7.3-zip php7.3-bcmath zip unzip 4a.
sudo service nginx restart sudo service php7.3-fpm restart Froxlor install
There are two ways to get Froxlor. Stable (wget) and Beta Build (git / Master)
Stable Version
1.
cd /var/www/html/ 1a.
sudo https://files.froxlor.org/releases/froxlor-latest.tar.gz && sudo tar xzfv froxlor-latest.tar.gz or
Git Version (Beta Version)
sudo git clone https://github.com/Froxlor/Froxlor.git && sudo chown -HR www-data:www-data Froxlor/ sudo apt install composer su - www-data -s /bin/bash cd /var/www/html/Froxlor/ 1a(2). Composer install in your Froxlor directory
composer install --no-dev 1b.
sudo chown -R www-data:www-data Froxlor/ Set up Froxlor
2. Open Your Browser
2a.
http://your IP or Hostname/Froxlor
Install Froxlor finish
3d. Move userdata (Optional)
sudo mv /tmp/userdata.inc.php /var/www/html/Froxlor/lib/ 2c.
sudo rm /etc/nginx/site-enable/default don't restart nginx!
Froxlor Settings
1. Cronjob
sudo nano /etc/cron.d/froxlor insert
# # Set PATH, otherwise restart-scripts won't find start-stop-daemon # PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin # # Regular cron jobs for the froxlor package # # Please check that all following paths are correct # */5 * * * * root /usr/bin/nice -n 5 /usr/bin/php -q /var/www/html/Froxlor/scripts/froxlor_master_cronjob.php sudo chmod 0640 "/etc/cron.d/froxlor" sudo chown root:0 "/etc/cron.d/froxlor" sudo service cron restart 2. Nginx PHP Backend
Settings > Webserver settings > Nginx PHP backend
from 127.0.0.1:8888 to unix:/run/php/php7.3-fpm.sock
3.
sudo mkdir -p /var/customers/webs/ sudo mkdir -p /var/customers/logs/ sudo mkdir -p /var/customers/tmp sudo chmod 1777 /var/customers/tmp sudo service nginx restart 4. IPs and Ports > Add IP/Port
2a(1), SSL Port
Wait 5min for Autimatic Start Froxlor's cronjob or start the cronjob manually
sudo php /var/www/html/Froxlor/scripts/froxlor_master_cronjob.php --force --debug Optional
PHP-FPM activate
1. User/Group add
sudo adduser froxlorlocal --disabled-password --no-create-home && sudo usermod -a -G www-data froxlorlocal 2. libnss-extrausers install
sudo apt install nscd libnss-extrausers sudo mkdir -p /var/lib/extrausers sudo touch /var/lib/extrausers/{passwd,group,shadow} sudo mv "/etc/nsswitch.conf" "/etc/nsswitch.conf.frx.bak" sudo nano /etc/nsswitch.conf # Make sure that `passwd`, `group` and `shadow` have mysql in their lines # You should place mysql at the end, so that it is queried after the other mechanisams # passwd: compat extrausers group: compat extrausers shadow: compat extrausers hosts: files dns networks: files dns services: db files protocols: db files rpc: db files ethers: db files netmasks: files netgroup: files bootparams: files automount: files aliases: files sudo service nscd restart sudo nscd --invalidate=group 2a. Settings > System settings > Activate > Use libnss-extrausers instead of libnss-mysql
3. Settings > PHP-FPM > Activated:
Change from NO to YES
3a. PHP-FPM versions
Change > php-fpm restart command:
service php7.3-fpm restart and
Configuration directory of php-fpm: > to
/etc/php/7.3/fpm/pool.d/ 3b. Settings > Froxlor VirtualHost settings > Activate > Enable PHP-FPM for the Froxlor vHost
3c.
sudo chown -HR froxlorlocal:froxlorlocal /var/www/html/Froxlor SSL / Let's Encrypt activate
1.
sudo apt install certbot 1a.
sudo mkdir /etc/nginx/ssl && cd /etc/nginx/ssl 1b. Create SSL File
sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/nginx/ssl/nginx.key -out /etc/nginx/ssl/nginx.crt 1c.
sudo nano /etc/nginx/acme.conf insert
location /.well-known/acme-challenge { alias /var/www/html/Froxlor/.well-known/acme-challenge; location ~ /.well-known/acme-challenge/(.*) { default_type text/plain; } }
2. Open your Froxlor Panel
Settings> SSL > Activated:
Change from NO to YES
2a. Settings > SSL > Settings
Change your path from your certificate / Keyfile
Path to the SSL certificate
insert
/etc/nginx/ssl/nginx.crt Path to the SSL Keyfile
insert
/etc/nginx/ssl/nginx.key 2b. Settings > SSL > Settings
Activate > Enable Let's Encrypt
Change Path to the acme.conf snippet to >
/etc/nginx/acme.conf 2c. Activate on Settings > Froxlor VirtualHost settings
- Enable Let's Encrypt for the froxlor vhost
- Enable SSL-redirect for the froxlor vhost
- HTTP Strict Transport Security (HSTS)
- Include HSTS for any subdomain
2d. Activated HTTP2 Support on > Settings > Nginx
-
By nisamudeen97
Hi,
I need to enable access log for froxlor. In froxlor vhost config I cannot see access log enabled. If I edit manually it is getting overwritten. Below is my vhost config for froxlor. let me know how to enable access log and error log for foxlor.
<VirtualHost 192.168.73.40:443>
DocumentRoot "/var/www/froxlor/"
ServerName hostname.cm
SSLEngine On
SSLProtocol -ALL +TLSv1 +TLSv1.2
SSLCompression Off
SSLHonorCipherOrder On
SSLCipherSuite ECDH+AESGCM:ECDH+AES256:!aNULL:!MD5:!DSS:!DH:!AES128
SSLVerifyDepth 10
SSLCertificateFile /etc/apache2/ssl/*********.crt
SSLCertificateKeyFile /etc/apache2/ssl/******.key
SSLCACertificateFile /etc/apache2/ssl/*******CA.crt
SSLCertificateChainFile /etc/apache2/ssl/******.crt
</VirtualHost>
-