How to sync Let's Encrypt configuration to slave

Started by fabiodanzetta, September 03, 2021, 03:13:00 PM

Previous topic - Next topic
Hello to all,
I have this problem: I have installed and configured the Let's Encrypt plugin to use HTTPS for some services and everything works great.
I also configured HA proxy and everything is ok but let's encrypt configuration it is not possible to synchronize it with my second backup node as it does not appear among the selectable items in the high reliability menu.
How can I do it in such a way that I switch to the second node also through this I can use HTTPS?

Thank you all.

You must select to sync Certificates in System: High Availability: Settings


Prego
2x 23.7 VMs & CARP, 4x 2.1GHz, 8GB
Cisco L3 switch, ESXi, VDS, vmxnet3
DoT, Chrony, HAProxy + NAXSI, Suricata
VPN: IPSec, OpenVPN, Wireguard
MultiWAN: Fiber 500/500Mbit dual stack + 4G failover

--
Available for private support.
Did my answer help you? Feel free to click [applaud] to the left

Sorano thanks.

The option to synchronize the certificates was already enabled but when I go to see on the slave, under the heading certificates of the let's encrypt plugin, there is no certificate and no other settings that are present on the master.

Thanks again

Quote from: fabiodanzetta on September 05, 2021, 04:46:49 PM
under the heading certificates of the let's encrypt plugin, there is no certificate and no other settings that are present on the master.

That is as expected. You sync the certificates, not the LE settings.

Look at certificates on the slave instead.
System: Trust: Certificates
2x 23.7 VMs & CARP, 4x 2.1GHz, 8GB
Cisco L3 switch, ESXi, VDS, vmxnet3
DoT, Chrony, HAProxy + NAXSI, Suricata
VPN: IPSec, OpenVPN, Wireguard
MultiWAN: Fiber 500/500Mbit dual stack + 4G failover

--
Available for private support.
Did my answer help you? Feel free to click [applaud] to the left

Sorano thanks again, I found there certificates.
So I guess I'll have to replicate the let's encrypt plugin configuration by hand right?
Isn't there a way to sync it automatically?

Thanks