Task: Setup nginx with LetsEncrypt on Hetzner to Proxy Autobase

[nelsonic]

As noted in #104 (comment) the Autobase console is served on http; (not https) 🔓
so requests to the console can be intercepted by a MITM. 😬

Todo

• Setup (and fully document) nginx on the autobase-console server on Hetzner
  https://console.hetzner.cloud/projects/3886115/servers/57770120

• Ensure auto-updating LetsEncrypt
  https://community.letsencrypt.org/t/ssl-certificate-updating-automatically/185037

• Setup autobase.dwyl.com autobase.dwy.is subdomain? so we don't have to access via IP Address?

This should be quick. Just need uninterrupted time. 🧑‍💻 ⏳

Prereq:

• Add MBP SSH (public) key to the server so I can access it from laptop. 🔑 💻

[nelsonic]

Have access to the autobase console server from MBP:

So I can work from the car while kids are at school. 🧑‍💻 ✅

[nelsonic]

Kill the autobase Docker instance for now as it occupies TCP port 80 on the server.

docker ps

CONTAINER ID   IMAGE                     COMMAND                  CREATED        STATUS             PORTS                                                                                        NAMES
6ea268d81fd7   autobase/console:latest   "/usr/bin/supervisor…"   3 months ago   Up About an hour   0.0.0.0:80->80/tcp, [::]:80->80/tcp, 0.0.0.0:8080->8080/tcp, [::]:8080->8080/tcp, 5432/tcp   autobase-console

docker stop $(docker ps -a -q)

[nelsonic]

[nelsonic]

Error response from daemon: Conflict. The container name "/pg-console" is already in use by container "05c7156394d14dd31f66f2e13e78434788928aa5801a4a8c48b4e4a79f906c2f". You have to remove (or rename) that container to be able to reuse that name.

[nelsonic]

Spoke to: a support person via Live Chat: https://www.namecheap.com/help-center/live-chat
They were helpful and together we determined that I had misconfigured the TXT record ... 🤦

Full transcript: Chat_Transcript_23_Mar_2025.pdf

https://ap.www.namecheap.com/domains/domaincontrolpanel/dwy.is/advancedns

Confirmed working:
https://toolbox.googleapps.com/apps/dig/#TXT/_acme-challenge.dwy.is

https://autobase.dwy.is secure! 🎉

[nelsonic]

http://autobase.dwy.is now automatically redirects to: https://autobase.dwy.is/login 🔒 ✅
I'm a lot more happy about this not having an MITM attack now. ☺

[nelsonic]

Just have to proof-read the documentation before I can close this. 👀 ⏳

[nelsonic]

https://autobase.dwy.is/clusters

Full config: https://github.com/dwyl/learn-devops/pull/107/files#diff-c2ce56e35077fe1b79e142c7aa4204451109574e57a4c3b52a6c2432ee98812c

PR: #107