Topics

Hello,
I have the problem that under certificate field in NGINX plugin like HTTP Server or Upstream.
The dropdown of the certificate is listing the same certificates couple of times and also some deleted certificates are still in the list although they are deleted under ACME Client.
I tried to dig in the files but never figured out the way NGINX plugin is calling the certificates and how they're populated.
I think that the certs are being displayed there multiple of times due to the renewal that is being regarded as multiple certs.
I tried to clean up the directories  /usr/local/etc/nginx/key/ and  /var/etc/acme-client/ where old certs are still there but that didn't help that NGINX plugin stop displaying multiple certs.

Any tip how I did ended up with that and how can i clean up the multiple entries?

Hello,

I just notice that when setting up the WebGUI to run over HTTPS under System -> Settings -> Administraion, that we can change the TCP port but only for one protocol and not both HTTP and HTTPS ports.

I just need to still be able to use HTTPS for the WebGUI but also change the default HTTP 80 port to free it for other applications such as Nginx.
The only solution that is now working is switching to HTTP so i can change the port and run Nginx otherwise by activating HTTPS lighttpd from WebGUI will listen on 80 and block Nginx process from starting.

Is that a limitation or am I missing something?

Hello all,

First thanks for this amazing firewall, I'm coming from pfSense and noticed a great network performance boost especially with the bandwidth speed.

Now I have a small question with acme.sh on pfsense, we used to write custom commands, but here the acme.sh client is much changed and that's still fine as long as it's more obviously more secure.

I read already that in order to get my restart action I need to create a configd action.

So i done this already by creating actions_acmescripts.conf under

Code Select Expand

/usr/local/opnsense/service/conf/actions.d.

then restarted configd service and tested my command like the following:

Code Select Expand

configctl acmescripts send_pve_cert

It runs properly and all fine, now the simple question, how do I get this to appear in the LetsEncrypt-Restart Actions on GUI side because after adding nothing is added at the frontend.


Any tip is highly appreciated, thanks for your time and for reading my issue.