Posts

Overview Update the default web visit from http to https. To secure the web visiting connection with trusted SSL encryption. Free SSL Cert Install acme.sh Install Run commands install from web curl https://get.acme.sh | sh -s [email protected] Create alias for: acme.sh=~/.acme.sh/acme.sh. Ref Installation Guild: https://github.com/acmesh-official/acme.sh/wiki/How-to-install Change Default CA to letsencrypt Acme.sh changed the defualt CA to zerossl. We need to change the default CA to letsencrypt, run the command: acme.sh --set-default-ca --server letsencrypt Cloudflare API Using “_acme-challenge” require add TXT DNS record....

Overview This post is aiming to design and implement a secure web service. The server systems are using debian based system. Network and Service Design The firewall of cloud server will only expose two ports 80 and 443 which works for http and https web services. Creating a secure TCP tunnel for connecting all the servers, in one virtual internal network, same IP range. Using Nginx as proxy and web service on all servers....