create and install ssl certificate

Learning
1

Hi

I have installed frappe LMS with self hosting method. How can i generate and install ssl certificate for that?

2

Hi @REZAFatf:

Check this doc.
https://docs.frappe.io/framework/user/en/bench/guides/lets-encrypt-ssl-setup

Just one command. :wink:

4

thanks. Because i installed with self hosting method i do not have bench. and i can not find site-config. please help

5

Try this the step by step :slight_smile:

Hosting panel :

  1. Setup “A” Record
    —Type : A
    — Host/Name : myerp.web.com
    —Value (IP Address / Target) : {your_vps_address}

Ubuntu System :

cd ~/frappe-bench

nano site/myerp.web.com/site_config.json
add => "host_name": "erp.myweb.com"

bench config dns_multitenant on

sudo bench setup lets-encrypt myerp.web.com

bench setup nginx

systemctl reload nginx

6

thanks. self hosting installs lms with docker containers. it uses traefik as proxy and installs ssl cert on traefik. do you have any idea how can i install ssl on that? I already have my cert and private key

7

Self-hosted docker setup with SSL on traefik requires knowledge and experience with lots of different moving parts: docker compose, firewall rules, NAT and DNS. The first thing to check (to know all those basic pre-requisites to SSL are working) would be: is your frappe instance accessible to the outside world via HTTP on port 80 without SSL? What is the URL? Can you successfully browse it from a different network than your frappe instance is on, for example, from a mobile phone with WiFi turned off?

8

yes it is accessible from outside on internet and other local networks. please give me the step by step method , because I need to install ssl ASAP. I am an experienced network and security engineer.

9

The step-by-step method is on the frappe github page: GitHub - frappe/frappe_docker: Docker images for production and development setups of the Frappe framework and ERPNext

Click on the link for “Single Server Example”, which takes you step by step from “zero” to a working erpnext with TLS via traefik. It assumes you know how to take care of the various DNS, NAT, and firewall requirements.

Edit: for site creation, see frappe_docker/docs/site-operations.md at main · frappe/frappe_docker · GitHub

10

thanks but i do not want erpnext. I installed frappe lms with self hosting method and these instructions are different from my setup

11

The example is still valid, though, as an example. All you would need to do to have frappe + lms instead of frappe + erpnext is to change the customizable image in the yaml file you end up with in the end.

You will need to build the (frappe + lms) image yourself following frappe_docker/docs/custom-apps.md at main · frappe/frappe_docker · GitHub

Then edit your yaml file to use the image you built. That is how it would be done. There can not be separate instructions for every conceivable combination of apps. You need to take the (frappe + erpnext) example instructions that are there, understand how it works, and modify it for your needs.