Self HostedToolsGeneralWeb

SSL not working on production hosting

Dec 27, 2023, 22:10

View on Discord

Votes

Replies

Participants

Unknown

Messages

DrakeOriginal post

Mar 5, 2023, 15:27

Btw, for multi line, it's best to use 3 back ticks instead of 1

Summary

The user is having issues with SSL not working on their production hosting. They have shared their Apache configuration and it seems that the proxy pass for port 443 is commented out, causing the issue. The solution is to uncomment the proxy pass lines and change them from HTTP to HTTPS.

Govind

Rank 2: Process

Mar 5, 2023, 15:28

okay

Govind

Rank 2: Process

Mar 5, 2023, 15:28

😀

Drake

Mar 5, 2023, 15:29

Maybe your proxy pass over here should go to https

Govind

Rank 2: Process

Mar 5, 2023, 15:30

ProxyPass / https://127.0.0.1:3031/
ProxyPassReverse / https://127.0.0.1:3031/

Govind

Rank 2: Process

Mar 5, 2023, 15:30

like this ?

Govind

Rank 2: Process

Mar 5, 2023, 15:34

no . . . . .
it's not working

Govind

Rank 2: Process

Mar 5, 2023, 15:36

last time i opened SMTP error and conclusion was we need to have ssl on appwrite.example.com

Govind

Rank 2: Process

Mar 5, 2023, 15:37

so now I have a ssl on domain, all subdomains

Govind

Rank 2: Process

Mar 5, 2023, 15:38

but it is not redirecting on https

Govind

Rank 2: Process

Mar 5, 2023, 15:39

<VirtualHost *:80>
    ServerName appwrite.exampledev.xyz
    ServerAlias appwrite.exampledev.xyz
    ServerAdmin govinddeshmukh2001@gmail.com
    #DocumentRoot /var/www/appwrite.exampledev.xyz
    ErrorLog ${APACHE_LOG_DIR}/error.log
    CustomLog ${APACHE_LOG_DIR}/access.log combined

    ProxyPass / http://127.0.0.1:3030/
    ProxyPassReverse / http://127.0.0.1:3030/
    #proxy_set_header Host $host;
    #ProxyRequests Off
    ProxyPassReverseCookieDomain  "127.0.0.1:3030"  "appwrite.exampledev.xyz"
    ProxyPreserveHost On

</VirtualHost>

<VirtualHost *:443>
    ServerName appwrite.exampledev.xyz
    ServerAlias appwrite.exampledev.xyz
    ServerAdmin govinddeshmukh2001@gmail.com
    #DocumentRoot /var/www/appwrite.exampledev.xyz
    ErrorLog ${APACHE_LOG_DIR}/error.log
    CustomLog ${APACHE_LOG_DIR}/access.log combined

    #ProxyPass / http://127.0.0.1:3031/
    #ProxyPassReverse / http://127.0.0.1:3031/
    #proxy_set_header Host $host;
    #ProxyRequests Off
    #ProxyPassReverseCookieDomain  "127.0.0.1:3031"  "appwrite.exampledev.xyz"
    #ProxyPreserveHost On

    #SSL
    SSLEngine On
    SSLCertificateFile /etc/letsencrypt/live/exampledev.xyz/cert.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/exampledev.xyz/privkey.pem
    SSLCertificateChainFile /etc/letsencrypt/live/exampledev.xyz/chain.pem
    SSLCipherSuite EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5
    SSLProtocol All -SSLv2 -SSLv3 -TLSv1
    SSLHonorCipherOrder On

</VirtualHost>

Govind

Rank 2: Process

Mar 5, 2023, 15:40

here is complete vhost configuration

Drake

Mar 5, 2023, 15:42

Uhh the 443 proxy pass is commented out 🧐 and it's not https

Govind

Rank 2: Process

Mar 5, 2023, 15:43

<VirtualHost *:80>
    ServerName appwrite.exampledev.xyz
    ServerAlias appwrite.exampledev.xyz
    ServerAdmin govinddeshmukh2001@gmail.com
    #DocumentRoot /var/www/appwrite.exampledev.xyz
    ErrorLog ${APACHE_LOG_DIR}/error.log
    CustomLog ${APACHE_LOG_DIR}/access.log combined

    ProxyPass / http://127.0.0.1:3030/
    ProxyPassReverse / http://127.0.0.1:3030/
    #proxy_set_header Host $host;
    #ProxyRequests Off
    ProxyPassReverseCookieDomain  "127.0.0.1:3030"  "appwrite.exampledev.xyz"
    ProxyPreserveHost On

</VirtualHost>

<VirtualHost *:443>
    ServerName appwrite.exampledev.xyz
    #ServerAlias appwrite.exampledev.xyz
    ServerAdmin govinddeshmukh2001@gmail.com
    #DocumentRoot /var/www/appwrite.exampledev.xyz
    ErrorLog ${APACHE_LOG_DIR}/error.log
    CustomLog ${APACHE_LOG_DIR}/access.log combined

    ProxyPass / https://127.0.0.1:3031/
    ProxyPassReverse / https://127.0.0.1:3031/
    #proxy_set_header Host $host;
    #ProxyRequests Off
    ProxyPassReverseCookieDomain  "127.0.0.1:3031"  "appwrite.exampledev.xyz"
    ProxyPreserveHost On

    #SSL
    SSLEngine On
    SSLCertificateFile /etc/letsencrypt/live/exampledev.xyz/cert.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/exampledev.xyz/privkey.pem
    SSLCertificateChainFile /etc/letsencrypt/live/exampledev.xyz/chain.pem
    SSLCipherSuite EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5
    SSLProtocol All -SSLv2 -SSLv3 -TLSv1
    SSLHonorCipherOrder On

</VirtualHost>

Govind

Rank 2: Process

Mar 5, 2023, 15:43

now ?????

Govind

Rank 2: Process

Mar 5, 2023, 15:44

Drake

Mar 5, 2023, 15:45

Can you browse to your server using https on port 3031?

Govind

Rank 2: Process

Mar 5, 2023, 15:45

okay

Govind

Rank 2: Process

Mar 5, 2023, 15:46

Govind

Rank 2: Process

Mar 5, 2023, 15:47

its working like this but ssl is not visible

Drake

Mar 5, 2023, 15:50

Maybe you can check Apache logs for why this error is happening then

Govind

Rank 2: Process

Mar 5, 2023, 15:50

🥲

Govind

Rank 2: Process

Mar 5, 2023, 15:55

not getting anything in logs

Govind

Rank 2: Process

Mar 5, 2023, 15:55

please tell me correct apache2 configuration for appwrite

Drake

Mar 5, 2023, 16:14

Sorry I don't really know Apache. The only other resource I have is: https://github.com/appwrite/appwrite/discussions/4056

SSL not working on production hosting

Need support?_