{"id":1232,"date":"2017-03-02T15:06:45","date_gmt":"2017-03-02T07:06:45","guid":{"rendered":"https:\/\/umarzuki.org\/blogku\/?p=1232"},"modified":"2017-03-02T15:06:45","modified_gmt":"2017-03-02T07:06:45","slug":"setting-ssl-letsencrypt-nginx-citadel","status":"publish","type":"post","link":"https:\/\/umarzuki.org\/blog\/2017\/03\/02\/setting-ssl-letsencrypt-nginx-citadel\/","title":{"rendered":"Setting SSL (letsencrypt) nginx Citadel"},"content":{"rendered":"
    \n
  1. Tukar port HTTPS Citadel ke 2001 dengan arahan\n

    dpkg-reconfigure citadel-webcit<\/code>\n<\/li>\n

  2. Pasang SSL truecrypt dengan merujuk kepada artikel https:\/\/www.digitalocean.com\/community\/tutorials\/how-to-secure-nginx-with-let-s-encrypt-on-ubuntu-16-04<\/a><\/li>\n
  3. Edit \/etc\/nginx\/sites-enabled\/citadel seperti berikut:\n

    [code lang=’plain’]
    \nserver {<\/p>\n

    server_name domain.com citadel.domain.com;
    \n listen 443 ssl http2;
    \n listen [::]:443 ssl http2;
    \n include snippets\/ssl-domain.com.conf;
    \n include snippets\/ssl-params.conf;<\/p>\n

    error_log \/var\/log\/nginx\/citadel-error.log;
    \n access_log \/var\/log\/nginx\/citadel-access.log;<\/p>\n

    root \/usr\/share\/citadel-webcit;
    \n# optional:
    \n# listen 192.168.1.1:443
    \n# instead depending on your setup…
    \n # Main location
    \n location \/webcit\/ {
    \n proxy_pass https:\/\/127.0.0.1:2001\/;
    \n proxy_redirect off;<\/p>\n

    proxy_set_header Host $host;
    \n proxy_set_header X-Real-IP $remote_addr;
    \n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;<\/p>\n

    client_max_body_size 10m;
    \n client_body_buffer_size 128k;<\/p>\n

    proxy_connect_timeout 90;
    \n proxy_send_timeout 90;
    \n proxy_read_timeout 90;<\/p>\n

    proxy_buffer_size 4k;
    \n proxy_buffers 4 32k;
    \n proxy_busy_buffers_size 64k;
    \n proxy_temp_file_write_size 64k;
    \n }
    \n location \/listsub\/ {
    \n proxy_pass https:\/\/127.0.0.1:2001;
    \n proxy_redirect off;<\/p>\n

    proxy_set_header Host $host;
    \n proxy_set_header X-Real-IP $remote_addr;
    \n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;<\/p>\n

    client_max_body_size 10m;
    \n client_body_buffer_size 128k;<\/p>\n

    proxy_connect_timeout 90;
    \n proxy_send_timeout 90;
    \n proxy_read_timeout 90;<\/p>\n

    proxy_buffer_size 4k;
    \n proxy_buffers 4 32k;
    \n proxy_busy_buffers_size 64k;
    \n proxy_temp_file_write_size 64k;
    \n }
    \n location \/groupdav\/ {
    \n proxy_pass https:\/\/127.0.0.1:2001\/;
    \n proxy_redirect off;<\/p>\n

    proxy_set_header Host $host;
    \n proxy_set_header X-Real-IP $remote_addr;
    \n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;<\/p>\n

    client_max_body_size 10m;
    \n client_body_buffer_size 128k;<\/p>\n

    proxy_connect_timeout 90;
    \n proxy_send_timeout 90;
    \n proxy_read_timeout 90;<\/p>\n

    proxy_buffer_size 4k;
    \n proxy_buffers 4 32k;
    \n proxy_busy_buffers_size 64k;
    \n proxy_temp_file_write_size 64k;
    \n }
    \n location \/freebusy\/ {
    \n proxy_pass https:\/\/127.0.0.1:2001\/;
    \n proxy_redirect off;<\/p>\n

    proxy_set_header Host $host;
    \n proxy_set_header X-Real-IP $remote_addr;
    \n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;<\/p>\n

    client_max_body_size 10m;
    \n client_body_buffer_size 128k;<\/p>\n

    proxy_connect_timeout 90;
    \n proxy_send_timeout 90;
    \n proxy_read_timeout 90;<\/p>\n

    proxy_buffer_size 4k;
    \n proxy_buffers 4 32k;
    \n proxy_busy_buffers_size 64k;
    \n proxy_temp_file_write_size 64k;
    \n }
    \n}[\/code]<\/li>\n<\/ol>\n

    Sumber:
    \nhttp:\/\/www.citadel.org\/doku.php\/faq:installation:apacheproxy
    \nhttps:\/\/www.digitalocean.com\/community\/tutorials\/how-to-secure-nginx-with-let-s-encrypt-on-ubuntu-16-04<\/p>\n","protected":false},"excerpt":{"rendered":"

    Tukar port HTTPS Citadel ke 2001 dengan arahan dpkg-reconfigure citadel-webcit Pasang SSL truecrypt dengan merujuk kepada artikel https:\/\/www.digitalocean.com\/community\/tutorials\/how-to-secure-nginx-with-let-s-encrypt-on-ubuntu-16-04 Edit \/etc\/nginx\/sites-enabled\/citadel seperti berikut: [code lang=’plain’] server { server_name domain.com citadel.domain.com; listen 443 ssl http2; listen [::]:443 ssl http2; include snippets\/ssl-domain.com.conf; include snippets\/ssl-params.conf; error_log \/var\/log\/nginx\/citadel-error.log; access_log \/var\/log\/nginx\/citadel-access.log; root \/usr\/share\/citadel-webcit; # optional: # listen 192.168.1.1:443 # instead depending […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[251],"tags":[421,201,29],"class_list":["post-1232","post","type-post","status-publish","format-standard","hentry","category-email","tag-citadel","tag-ssl","tag-ubuntu"],"_links":{"self":[{"href":"https:\/\/umarzuki.org\/blog\/wp-json\/wp\/v2\/posts\/1232","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/umarzuki.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/umarzuki.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/umarzuki.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/umarzuki.org\/blog\/wp-json\/wp\/v2\/comments?post=1232"}],"version-history":[{"count":0,"href":"https:\/\/umarzuki.org\/blog\/wp-json\/wp\/v2\/posts\/1232\/revisions"}],"wp:attachment":[{"href":"https:\/\/umarzuki.org\/blog\/wp-json\/wp\/v2\/media?parent=1232"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/umarzuki.org\/blog\/wp-json\/wp\/v2\/categories?post=1232"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/umarzuki.org\/blog\/wp-json\/wp\/v2\/tags?post=1232"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}