This forum uses cookies
This forum makes use of cookies to store your login information if you are registered, and your last visit if you are not. Cookies are small text documents stored on your computer; the cookies set by this forum can only be used on this website and pose no security risk. Cookies on this forum also track the specific topics you have read and when you last read them. Please confirm whether you accept or reject these cookies being set.

A cookie will be stored in your browser regardless of choice to prevent you being asked this question again. You will be able to change your cookie settings at any time using the link in the footer.

Sentora Feedback and Ideas
#7
RE: Sentora Feedback and Ideas
(10-27-2017, 04:36 AM)TGates Wrote: We are aware of the user situation. It was done the way it is because Sentora was originally built to be able to be used on *nix as well as Windows. Since we have pretty much dropped Windows support, changing the user methods is part of our future changes.

Good to know! Can I help make this happen faster ? Where are you discussing this change ?

Another thing that I would like to put into sentora is generating an SSL cert with lets encrypt automatically for the sentora panel domain and set config to SSL by default.

I don't see why this is not the default setup.

Comment all lines in welcome.conf file (disable Testing 123 apache page) :
vi /etc/httpd/conf.d/welcome.conf
#Comment
out all active lines in welcome.conf

Comment Listen 443 line in ssl.conf :
vi /etc/httpd/conf.d/ssl.conf
#Comment
out that line like this :
#Listen
443


Install Lets Encypt :
yum install mod_ssl openssl yum-utils certbot-apache
certbot --apache


Install sentora panel SSL certificate :
Into SentoraCP go to Sentora -> Admin -> Module Admin => Apache Config
Copy and paste into Global Sentora entry:
Redirect Permanent / https://sentora.domain.com/

Check "Force Update" checkbox. Save.

vi /etc/sentora/configs/apache/httpd-vhosts-ssl.conf
<VirtualHost *:443>
ServerAdmin zadmin@localhost
DocumentRoot "/etc/sentora/panel/"
ServerName sentora.domain.com
ErrorLog "/var/sentora/logs/sentora-error.log"
CustomLog "/var/sentora/logs/sentora-access.log" combined
CustomLog "/var/sentora/logs/sentora-bandwidth.log" common
AddType application/x-httpd-php .php
<Directory "/etc/sentora/panel/">
Options +FollowSymLinks -Indexes
AllowOverride All
Require all granted
</Directory>
SSLEngine on
SSLCertificateFile /etc/letsencrypt/live/sentora.domain.com/fullchain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/sentora.domain.com/privkey.pem
SSLCACertificateFile /etc/letsencrypt/live/sentora.domain.com/chain.pem
</VirtualHost>

vi /etc/sentora/configs/apache/httpd.conf
#At
the end of the file, add this line :
Include /etc/sentora/configs/apache/httpd-vhosts-ssl.conf

service httpd restart

Auto renew all lets encrypt certificates at 3 am every day so they do not expire :

vi /etc/crontab
#Add
this line :
0 3 * * * root certbot renew

service crond reload

And if we auto-generate an SSL cert for the sentora domain, we could use the same cert for FTP/TLS :

Create /etc/proftpd/tls.conf file :

mkdir /etc/proftpd
vi /etc/proftpd/tls.conf

<IfModule mod_tls.c>
TLSEngine on
TLSLog /var/log/proftpd/tls.log
TLSProtocol SSLv23
TLSRSACertificateFile /etc/letsencrypt/live/sentora.domain.com/fullchain.pem
TLSRSACertificateKeyFile /etc/letsencrypt/live/sentora.domain.com/privkey.pem
TLSRequired on
TLSOptions AllowClientRenegotiations NoSessionReuseRequired
TLSRenegotiate required off
</IfModule>


Edit /etc/proftpd.conf file :
vi /etc/proftpd.conf

#Add
these lines to end of file :
PassivePorts 55000 60000
Include /etc/proftpd/tls.conf


Restart proftpd :
service proftpd restart
Reply
Thanks given by:


Messages In This Thread
Sentora Feedback and Ideas - by Xversion - 08-12-2016, 05:16 AM
RE: Sentora Feedback and Ideas - by Xversion - 08-12-2016, 05:41 AM
RE: Sentora Feedback and Ideas - by Xversion - 08-12-2016, 05:44 AM
RE: Sentora Feedback and Ideas - by Xversion - 08-12-2016, 05:56 AM
RE: Sentora Feedback and Ideas - by translucide - 10-26-2017, 11:32 PM
RE: Sentora Feedback and Ideas - by TGates - 10-27-2017, 04:36 AM
RE: Sentora Feedback and Ideas - by translucide - 10-27-2017, 12:35 PM
RE: Sentora Feedback and Ideas - by TGates - 10-27-2017, 10:43 PM
RE: Sentora Feedback and Ideas - by Me.B - 10-27-2017, 11:23 PM
RE: Sentora Feedback and Ideas - by translucide - 10-28-2017, 02:53 AM
RE: Sentora Feedback and Ideas - by TGates - 10-28-2017, 06:49 AM

Possibly Related Threads…
Thread Author Replies Views Last Post
Update redirect to Sentora login to an error page if a sub domain does not exist TGates 0 2 ,291 01-28-2024, 06:20 AM
Last Post: TGates
Need Sentora HELP ? Alemiz 4 12 ,207 10-26-2018, 04:09 PM
Last Post: republicus
Sentora Panel Roadmap Me.B 9 36 ,364 08-31-2017, 02:16 PM
Last Post: betatester3.0

Forum Jump:


Users browsing this thread: 1 Guest(s)