1 (edited by Bronko 2023-07-16 07:29:36)

Topic: Disable HTTPS on Nginx

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 1.6.3
- Deployed with iRedMail Easy or the downloadable installer? No
- Linux/BSD distribution name and version: ubuntu 22.04
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): LDAP
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro? No
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

For all provided webinterface I would like to brake down to http, means disabling https in preparation for HAproxy ssl offloading.

I have removed symlink /etc/nginx/sites-enabled/00-default-ssl.conf and adapted
/etc/nginx/sites-enabled/00-default.conf:


server {
    # Listen on ipv4
    listen 80;
    listen [::]:80;

    server_name _;

    # Redirect all insecure http:// requests to https://
#    return 301 https://$host$request_uri;

    root /var/www/html;
    index index.php index.html;

    include /etc/nginx/templates/misc.tmpl;
#    include /etc/nginx/templates/ssl.tmpl;
    include /etc/nginx/templates/iredadmin.tmpl;
    include /etc/nginx/templates/roundcube.tmpl;
    include /etc/nginx/templates/sogo.tmpl;
    include /etc/nginx/templates/netdata.tmpl;
    include /etc/nginx/templates/php-catchall.tmpl;
    include /etc/nginx/templates/stub_status.tmpl;

}

and commented out specific http->https redirections in templates.

Its working for iredAdmin, but doesn't for roundcube entirely (no response), sogo yes, but succeed logins shows login page again.

Any hints for me?

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: Disable HTTPS on Nginx

I'm back on https and HAproxy can handle certificate exchange for iredmail web frontends, only.