Accessing IT-Tools
- Buka browser Anda dan kunjungi:
https://<SERVER_IP> - Peringatan SSL pada browser mungkin muncul (sertifikat yang ditandatangani sendiri)
- Diperlukan otentikasi (jendela pop-up Basic Auth)
- Metode otentikasi: HTTP Basic Auth
- Kredensial disimpan dengan aman di:
/root/.cloudzy-creds
Berkas dan Direktori Penting
- Direktori instalasi:
/root/it-tools - Berkas Docker Compose:
/root/it-tools/docker-compose.yml - Stored credentials:
/root/.cloudzy-creds - Nginx virtual host:
/etc/nginx/sites-available/it-tools.conf - Basic Auth file:
/etc/nginx/auth/it-tools.htpasswd - Sertifikat TLS:
/etc/nginx/ssl
Catatan Keamanan
- IT-Tools is not exposed directly to the network.
- Only Nginx listens on public ports.
- Access is protected via Basic Auth.
- TLS uses a self-signed certificate.
- Credentials are stored with restrictive permissions.
Mengaktifkan SSL dengan Domain
1. Arahkan domain Anda ke alamat IP server.
2. Edit konfigurasi Nginx dan ganti keduanya server_name <IP>; dengan domain Anda (<your-domain>) untuk blok HTTP (port 80) dan HTTPS (port 443):
vim /etc/nginx/sites-available/it-tools.conf
3. Instal Certbot:
apt install -y certbot python3-certbot-nginx
4. Jalankan perintah berikut untuk menghasilkan sertifikat Let's Encrypt yang valid:
certbot certonly --nginx --non-interactive --agree-tos --email [email protected] -d yourdomain.com
5. Ganti jalur SSL di konfigurasi Nginx:
vim /etc/apache2/sites-available/it-tools.conf
# Before:
# ssl_certificate /etc/nginx/ssl/fullchain.pem;
# ssl_certificate_key /etc/nginx/ssl/privkey.pem;
# After:
# ssl_certificate /etc/letsencrypt/live/yourdomain.com/fullchain.pem;
# ssl_certificate_key /etc/letsencrypt/live/yourdomain.com/privkey.pem;
6. Restart Nginx untuk menerapkan perubahan:
systemctl restart nginx
7. Buka browser Anda dan kunjungi: https://yourdomain.com