Let’s Encrypt cert

[Indjov]

Someone Were you able to go kiwiirc with such a certificate and how you did it to let go?

[ghost]

Hello,

you can setup a reverse proxy for that task:

https://kiwiirc.com/docs/installing/proxies

Do you want KiwiIRC on a domain/subdomain directly or on a subfolder ?

[Indjov]

Yeah , i want it on my domain name ;)

[ghost]

This config below will work (Nginx example) :

server {
   listen 443;
   server_name kiwi.example.com;
   ssl on;
   ssl_protocols TLSv1.2;
   ssl_certificate /etc/letsencrypt/live/kiwi.example.com/fullchain.pem;
   ssl_certificate_key /etc/letsencrypt/live/kiwi.example.com/privkey.pem;
   location / {
   proxy_pass http://localhost:7778/kiwi/;
   }
}

I haven't put the complete options for ssl, like the dhparams etc. But you can check and secure your SSL connection with https://www.ssllabs.com/ssltest/index.html

[Defman21]

You can use Mozilla's config generator for that: https://mozilla.github.io/server-side-tls/ssl-config-generator/

[johnange]

@Indjov in config.js make sure you have the following:

ssl_key: "/etc/letsencrypt/live/yourdomain.com/privkey.pem",
ssl_cert: "/etc/letsencrypt/live/yourdomain.com/cert.pem",
ssl_ca: "/etc/letsencrypt/live/yourdomain.com/chain.pem"

[rhodwulf]

On my server those files are in: /usr/local/psa/var/modules/letsencrypt/etc/liveexample.com

Then my configuration is:

Example SSL server block conf.servers.push({ port: 7777, address: "0.0.0.0",

    ssl:   true,
    ssl_key: "/usr/local/psa/var/modules/letsencrypt/etc/live/example.com/server.key",
    ssl_cert: "/usr/local/psa/var/modules/letsencrypt/etc/live/example.com/cert.pem",
     ssl_ca: "/usr/local/psa/var/modules/letsencrypt/etc/live/example.com/chain.pem"
});

But the page is left blank loading and from there it does not pass.

[DuR4c3ll]

server {
   listen 443;
   server_name kiwi.example.com;
   ssl on;
   ssl_protocols TLSv1.2;
   ssl_certificate /etc/letsencrypt/live/kiwi.example.com/fullchain.pem;
   ssl_certificate_key /etc/letsencrypt/live/kiwi.example.com/privkey.pem;
   location / {
   proxy_pass https://kiwi.example.com:7777;
   }
}

Do it like that for SSL and avoid the port number in the url.

[jryberg]

Charge port to 443 or the port number has to be a part of the url.

How should the browser know that you are using non default port for https otherwise?

Regards Johan

On Feb 28, 2018 11:58, "DuR4c3ll" [email protected] wrote:

Hello, I have everything installed and working but I have one issue that is vexing me. I do not want to see the port number in the browser url. I'd like it to be like so:

https://mysubdomain.site.com/ https://mysubdomain.site.com/

Instead of: https://mysubdomain.site.com:7777 https://mysubdomain.site.com:7777

If it helps I am using Nginx and I have fiddled but I just cannot get it to work.

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/prawnsalad/KiwiIRC/issues/895#issuecomment-369204006, or mute the thread https://github.com/notifications/unsubscribe-auth/AAzHJ-i4SIcOeBlDFe6aENZ16iN4Kvd1ks5tZTFJgaJpZM4Jwa1F .