SSL certificate for Kobo with letsencrypt on private domain

Kobo On Your Own Server
,
3

Hi,
Just confirm whether you have a public domain that resolves to a private IP address. In essence, the domain has to be public for it to work.

Regardless, you should do the following:

  1. set up your own NGINX instance using your SSL certificate (it doesn’t matter how you obtain it)

  2. look at https://github.com/kobotoolbox/kobo-install/blob/master/templates/nginx-certbot/data/nginx/app.conf.tpl * using that file as an example, configure a similar proxy_pass on your own NGINX instance

  3. set up kobo-install, and when it asks Auto-install HTTPS certificates with Let's Encrypt?, respond No - Use my own reverse-proxy/load-balancer

  4. when asked about Internal port used by reverse proxy, input the port used in the NGINX proxy_pass configuration, i.e. whatever they filled in for ${NGINX_EXPOSED_PORT}: proxy_pass http://${LOCAL_INTERFACE_IP}:${NGINX_EXPOSED_PORT};

Stephane

2 Likes