how to configure DNS records virtualmin?

[phenomlab]

@hari ok

[phenomlab]

@hari Just checking in - you feeling better now ?

[Hari]

@phenomlab thanks for asking, I got recovered after five days and later I was busy with fixing roof. I’ve turned off email notifications and didn’t checked this thread for the last two weeks.

[phenomlab]

@Hari no issues at all. Fixing the roof sounds like fun

[Hari]

today i have bought a new droplet, deleted the old one to avoid extra billing.

i have added A name record at CF for ask8.domain.com and trying to get lets encrypt certificate and getting this error

Requesting a certificate for ask8.domain.com, *.ask8.domain.com from Let’s Encrypt …
… request failed : Web-based validation failed : Wildcard hostname *.ask8.domain.com can only be validated in DNS mode DNS-based validation failed :

Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator manual, Installer None
Obtaining a new certificate
Performing the following challenges:
dns-01 challenge for ask8.domain.com
Running manual-auth-hook command: /etc/webmin/webmin/letsencrypt-dns.pl
Waiting for verification...
Challenge failed for domain ask8.domain.com
dns-01 challenge for ask8.domain.com
Cleaning up challenges
Running manual-cleanup-hook command: /etc/webmin/webmin/letsencrypt-cleanup.pl
Some challenges have failed.
IMPORTANT NOTES:
 - The following errors were reported by the server:
 
   Domain: ask8.domain.com
   Type:   unauthorized
   Detail: No TXT record found at
   _acme-challenge.ask8.domain.com
 
   To fix these errors, please make sure that your domain name was
   entered correctly and the DNS A/AAAA record(s) for that domain
   contain(s) the right IP address.

do i need to add any c name record at CF for this?

_acme-challenge.ask8.domain.com

[phenomlab]

@Hari Not typically. You’ll get this error if you also request a wildcard. Try it by itself, without the wildcard.

If you really want to use a wildcard, you’ll need a DNS record identified as * pointing to the IP address of your server.

[Hari]

@phenomlab got it, now i got the certificate, how can i enable HSTS at virtual min for ask8 virtual server

[phenomlab]

@Hari Apache or NGINX ?

[Hari]

@phenomlab NGINX i guess

[phenomlab]

@Hari Try this in your nginx.conf file

add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;

[Hari]

@phenomlab i think i missed this step, how can i make sure i am using NGINX

my current settings for ask8

ask8 is not opening because i have opted for HSTS i want an origin server certificate

[phenomlab]

@Hari How did you install Virtualmin on that droplet ? If you used the default commands, it is using Apache.

[Hari]

@phenomlab i followed this video, now i went forward with apache and enabled SSL at virtual min and ask8 is loading

from our conversation i have learned how to create SSL and apply for our server (sub-domain) at Virtualmin.

Virtualmin is so nice it has built-in SSH easy to access.

now i am taking backup of live flarum for ask. virtualserver

after uploading DB and files i will disturb if i face any issues.

next, i should set up Redis …etc and need to change ask server to NGINX

now deleting ask8 which is created to learn SSL

[phenomlab]

@Hari Ok, no issues. I tend to prefer NGINX over Apache2 myself.

See below

Automated Installation

Recommended system specifications Automated installation requires a freshly installed, supported OS 1 GB RAM (less for the --minimal installation), mo...(more)

Virtualmin

Essentially, you need to suffix the install script with --bundle LEMP

[Hari]

@phenomlab yeah, i missed that

i think migrating from apache to NGNIX is a bit complicated i will destroy this droplet and do the installation again.

tried this, after running apt-get install nginx

i thought this will get complicated

How To Migrate from an Apache Web Server to Nginx on an Ubuntu VPS | DigitalOcean

Apache and Nginx are both powerful web servers that can reliably host web content on the internet. While Apache is the currently the most popular web ...(more)

www.digitalocean.com

[phenomlab]

@Hari I wouldn’t do that personally. It’ll land up a complete mess, and you won’t be able to manage NGINX via Virtualmin if you take this route.

[Hari]

@phenomlab

wget http://software.virtualmin.com/gpl/scripts/install.sh --bundle LEMP

this command is not working

shall i avoid bundle and just try without it?

wget http://software.virtualmin.com/gpl/scripts/install.sh LEMP

edit

got it, as per this video i should add bundle line in the installation step

/bin/sh install.sh -bundle|-b LEMP

nope this one is also not working

[phenomlab]

@Hari said in how to configure DNS records virtualmin?:

/bin/sh install.sh -bundle|-b LEMP

Should be /bin/sh install.sh --bundle LEMP

[Hari]

@phenomlab

sh ./install.sh --bundle LEMP

this worked

[phenomlab]

@Hari