Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Regarding SSL #3

Closed
mervynlee94 opened this issue May 3, 2018 · 6 comments
Closed

Regarding SSL #3

mervynlee94 opened this issue May 3, 2018 · 6 comments
Labels
question Further information is requested

Comments

@mervynlee94
Copy link

Following the steps in README, is that SSL will be generate automatically? I see that I have to insert certificate inside Traefik configuration on Rancher, is that the moment I have to do something on it? Because if I leave it blank, I can't access those postfixadmin and webmail with https

@hardware
Copy link
Owner

hardware commented May 3, 2018

The SSL certificate is generated automatically when you doesn't provide a custom certificate :

https://github.com/hardware/mailserver-rancher#custom-mailserver-ssl-certificate
https://github.com/hardware/mailserver/blob/master/README.md#custom-certificates

@mervynlee94
Copy link
Author

mervynlee94 commented May 3, 2018

I sent you a message in Gitter. Thank you.

@mervynlee94
Copy link
Author

I don't get it. Mailserver is started on Rancher before Traefik. I only can dig out SSL cert and key in /mnt/docker/mailserver/mail/ssl/selfsigned/. Then I configure Traefik and insert the cert and key value, doesn't work. I am blur about the Let's encrypt generated by Traefik, because it doesn't. Please help=(

@mervynlee94
Copy link
Author

I get ERR connection refused when I try to suft webmail and so on with https://. In Traefik container, I got acme,json filled with those information on webmail, spam and postfixadmin sites.

@hardware
Copy link
Owner

hardware commented May 3, 2018

I am blur about the Let's encrypt generated by Traefik

I didn't find a way to share ssl certificates between Traefik and the mailserver with Rancher since @rawmind0 does not make it persistent. So you must use a custom certificat as stated in the readme.

rawmind0/alpine-traefik#31
https://github.com/rawmind0/rancher-traefik

@hardware hardware added the question Further information is requested label May 3, 2018
@mervynlee94
Copy link
Author

Well actually, to make it works, must make sure that the http port is 80 and the https port is 443 instead of 8080 and 8443

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
question Further information is requested
Projects
None yet
Development

No branches or pull requests

2 participants