Installing an SSL on Proxmox hostname using Let’s Encrypt involves the following steps:
- Install Certbot: Certbot is a tool that makes it easy to obtain and install SSL certificates from Let’s Encrypt. You can install Certbot on your Proxmox VE host by running the command:
eapt-get install certbot -y
- Obtain an SSL certificate: You can obtain an SSL certificate for your Proxmox VE hostname by running the command:
certbot certonly --standalone -d- Configure Proxmox VE web interface: In the Proxmox VE web interface, go to the Datacenter > Node > Network > Services and select the web interface, click the Edit button and set the SSL/TLS support to “on” and “Save”
- Copy the SSL certificate and key files: Copy the SSL certificate and key files from the Let’s Encrypt directory to the Proxmox VE configuration directory by running the command:
cp /etc/letsencrypt/live/<hostname>/fullchain.pem /etc/pve/pve-ssl.pem cp /etc/letsencrypt/live/<hostname>/privkey.pem /etc/pve/pve-ssl.key
- Restart the Proxmox VE web interface: To apply the new SSL certificate, you need to restart the Proxmox VE web interface by running the command:
systemctl restart pveproxy
- Test the SSL certificate: Open your web browser and navigate to the Proxmox VE host’s web interface using https instead of http, and check that the certificate is valid and that you can access the web interface without any errors.
- Update your DNS settings: Update your DNS settings to point to the IP address of your Proxmox VE host, and make sure that the hostname resolves to the correct IP address.
- Automate the renewal: Let’s encrypt certificate are valid for 90 days, you need to renew the certificate before it expires. You can automate the renewal process by adding a cron job to run the certbot renew command on a regular basis.
Please note that the above steps are general guide and the actual steps may vary depending on the version of proxmox you are running.
You can visit our YouTube channel for more interesting video https://www.youtube.com/@trainbrain007