Hello everyone, I am a newbie in server administration and a complete newbie in web server configuration. I am running CentOS 9 Stream and Appwrite on my VPS. I also have a purchased domain. Ports 80 and 443 are open. Currently, I am in a situation where I can access Appwrite via the web, but only via HTTP, not HTTPS. I have done everything mentioned in the documentation for tls certificates. https://www.appwrite.io/docs/advanced/self-hosting/tls-certificates
I apologize for possibly a dumb question, but I really don't know what to do next. Is it necessary to install a web server as a reverse proxy and for example certbot, to make HTTPS functional? Or is there an option to configure Appwrite itself without using external applications?
Is it necessary to install a web server as a reverse proxy
Nope
have you browsed to appwrite with the self-signed cert?
Nope, haven't tried. Not sure how.
This is output of docker compose logs appwrite-worker-certificates command
appwrite-worker-certificates | [Job] Received Job (65453845379f89.46580878). appwrite-worker-certificates | Cannot renew domain (mydomain.com) on attempt no. 5 certificate: Failed to issue a certificate with message: Saving debug log to /var/log/letsencrypt/letsencrypt.log appwrite-worker-certificates | Plugins selected: Authenticator webroot, Installer None appwrite-worker-certificates | Performing the following challenges: appwrite-worker-certificates | http-01 challenge for mydomain.com appwrite-worker-certificates | Using the webroot path /storage/certificates for all unmatched domains. appwrite-worker-certificates | Waiting for verification... appwrite-worker-certificates | Challenge failed for domain mydomain.com appwrite-worker-certificates | http-01 challenge for mydomain.com appwrite-worker-certificates | Cleaning up challenges appwrite-worker-certificates | Some challenges have failed. appwrite-worker-certificates | Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details. appwrite-worker-certificates | appwrite-worker-certificates | [Job] (65453845379f89.46580878) successfully run.
do you have anything in front of appwrite? like cloudflare proxy?
FYI, it's best to wrap code in backticks to format a bit nicer. You can use 1 backtick for inline code (https://www.markdownguide.org/basic-syntax/#code) and 3 backticks for multiline code (https://www.markdownguide.org/extended-syntax/#syntax-highlighting.
I am not aware of that. nor does the output from curl suggest this.
can you share your domain? feel free to DM me if you don't want to share here?
weird...everything seems okay...
are you still seeing the problem?
I found out, that i can generate certificates for my subdomains. So I configured appwrite to have the subdomain as it’s main domain and it works alright now. Thank you for the help though:)
[SOLVED] Don't know how to setup HTTPS
Recommended threads
- Go 1.25 runtime
So I'm trying to use go 1.25 for my functions and I can only find go-1.23 as a function runtime. So I did some searching and found https://github.com/appwrite/a...
- [ENHANCEMENT] Use the custom Next.js dep...
Deployment adapters on Next.js are now stable! This means that we don't have to stick to the limitations of sniffing out build outputs and manually moving or mo...
- NextJS builds sudden runtime_timeout
My builds suddenly stopped working. Activating old prebuilt snapshots work, but redeploying that same code produces builds that throw runtime_timeout FRA region