How to have Mail Gateway url dashboard with SSL?

[phoenix1977]

Hello,

i installed Mail Gateway Proxmox 7 but the url of the dashboard is not secure.

How to install Lets Encrypt to have a secure connection?

Thank you in advanced.

 

[Stoiko Ivanov]

The WebUI of PMG (and all other Proxmox products) always only listens on ssl-enabled ports and not plain-text (just for completeness sake).

to use a publicly trusted certificate you can use the ACME integration of PMG (or any of the other ACME clients, or even a commercial CA) - the steps and certificate locations are described in the reference documentation:
https://pmg.proxmox.com/pmg-docs/pmg-admin-guide.html#sysadmin_certificate_management

I hope this helps!

 

[phoenix1977]

Thank you very much, now works!

 

[InGenetic]

hi, i've just add letsencrypt from certificate menu using ACME Accounts as default , then i add domain of my pmg from ACME tab menu , after that i Order certificates now , and it's running automatically until done.

my question: i have to manual type the url like : https://pmg.mydomain.com:8006 to akses the pmg site.
is there any way to akses my pmg site with just typing "pmg.mydomain.com:8006" and it's automatically redirect to https://pmg.mydomain.com:8006 ?

please advice

 

[Stoiko Ivanov]

my question: i have to manual type the url like : https://pmg.mydomain.com:8006 to akses the pmg site.
is there any way to akses my pmg site with just typing "pmg.mydomain.com:8006" and it's automatically redirect to https://pmg.mydomain.com:8006 ?

This is something that your browser would need to do - and usually after visiting the page once it remembers the protocol.

In any case this is nothing PMG could do anything about

 

[InGenetic]

This is something that your browser would need to do - and usually after visiting the page once it remembers the protocol.

In any case this is nothing PMG could do anything about

Thank you for your information mr.Stoiko Ivanov, i just worried if i do something wrong when i create ssl certificate from letsencrypt.

 

[Stoiko Ivanov]

Thank you for your information mr.Stoiko Ivanov, i just worried if i do something wrong when i create ssl certificate from letsencrypt.

if you can reach the page with your browser, and if the browser does not show a warning about invalid/untrusted certificate I'd say - it works

 

[georgy.goshin]

In the Certificates section of the Proxmox mail web interface I can only add/order the LE certificates for API and SMTP, how can manage the webserver running on port 8006 to use LE certificate instead of self generated? I can configure this manually of course, but how to do it correctly?

 

[Stoiko Ivanov]

how can manage the webserver running on port 8006

This is the API.

 

[vantranvn]

The WebUI of PMG (and all other Proxmox products) always only listens on ssl-enabled ports and not plain-text (just for completeness sake).

to use a publicly trusted certificate you can use the ACME integration of PMG (or any of the other ACME clients, or even a commercial CA) - the steps and certificate locations are described in the reference documentation:
https://pmg.proxmox.com/pmg-docs/pmg-admin-guide.html#sysadmin_certificate_management

I hope this helps!

I already have a commercial certificate, next what do I need to do to apply the certificate to the dashboard url using SSL

 

[Stoiko Ivanov]

I already have a commercial certificate, next what do I need to do to apply the certificate to the dashboard url using SSL

upload the certificate and the key in the GUI (make sure to make a backup beforehand just in case):
https://pmg.proxmox.com/pmg-docs/pmg-admin-guide.html#sysadmin_certificate_management

 

[vantranvn]

upload the certificate and the key in the GUI (make sure to make a backup beforehand just in case):
https://pmg.proxmox.com/pmg-docs/pmg-admin-guide.html#sysadmin_certificate_management

I uploaded the certificate GUI to the key but I don't know how to apply it to pmg's home domain. In case of using my domain name https://pmg.domain.com:8006/. Hope you can guide me.

 

[Stoiko Ivanov]

uploaded the certificate GUI to the key but I don't know how to apply it to pmg's home domain. In case of using my domain name https://pmg.domain.com:8006/. Hope you can guide me.

I do not understand that request - what do you want to achieve and what exactly is not working?
share logs or screenshots - else it's not really possible to help!

 

[vantranvn]

I do not understand that request - what do you want to achieve and what exactly is not working?
share logs or screenshots - else it's not really possible to help!

My problem is after uploading the certificate to PMG but it seems the certificate is not working.
I would like to share a screenshot of the problem I am facing at this URL: https://prnt.sc/pH7669NCMyjf

 

[ikrsdo]

You need to upload your certificate for pmg-api.
Using for (SMTP) TLS does not apply to GUI access.

 

[vantranvn]

You need to upload your certificate for pmg-api.
Using for (SMTP) TLS does not apply to GUI access.

Thank you for explaining it to me. I re-uploaded the certificate and successfully applied the SSL section to the dashboard!