NAT VPS, letsencrypt and so on

eltrasimaco

Searched this category and googled for some time but no cigar. The question: Is the some guide where I can learn how to host a website in a NAT VPS (using a domain name) and can use https with letsencrypt?
thanks in advance

elliotc

You can use acme.sh for letsencrypt.

host a website in a NAT VPS

Listen to ipv6 or setup haproxy if your provider have one.

AlwaysSkint

@elliotc said: or setup haproxy if your provider have one

And go greyer than me in the process.

Abdullah

Use the IPv6 and port 80 for httpd.
Cloudflare provides IPv4 to IPv6 reverse proxy.

Cloudflare runs a free IPv6 to IPv4 proxy with their service. Cloudflare's CDN normally works on a reverse proxy (you publicly see a Cloudflare IP for your site, while it proxies your actual IP to load your site).

Steps:
1) Signup for a free account at cloudflare.com and add your domain (you can add as many as you want)
2) Update your domain's name servers at your registrar to the ones Cloudflare supplies (.ns.cloudflare.com)
3) Edit your Cloudflare DNS records, create & point your domain/subdomain's quad-A (AAAA) record to one of your LES IPv6 Addresses (see your welcome email with your VPS info)
4) Make sure you have "Cloudflare On" for the domain/subdomain record you just setup (make sure the little cloud icon is orange next to the record)
5) Head into your "Cloudflare Settings" for your domain - select the gear icon next to your domain in the main domain list
6) Scroll down and under 'Automatic IPv6' change the default mode 'Safe' to 'Full'
7) Modify your web server to listen on the IPv6 address you used above, on port 80 of course

Copied from the other place.

mikho

If you get a NAT VPS from [mrvm.net] you can use the domain forwarding option to host both http and https site.

All you need to do is to handle the renewel of your Lets Encrypt Cert as you would on any regular IPv4 VPS.

Rahul

@mikho said: If you get a NAT VPS from [mrvm.net] you can use the domain forwarding option to host both http and https site.

Was there any hiccup in the beginning with the setup, https sites with Lets Encrypt Cert like broken cert ?

mikho

@Rahul said:

@mikho said: If you get a NAT VPS from [mrvm.net] you can use the domain forwarding option to host both http and https site.

Was there any hiccup in the beginning with the setup, https sites with Lets Encrypt Cert like broken cert ?

The only hiccup is when some customers try to use TCP or HTTP(s) forward to other ports then 80/443.
This could end up messing up the config file and then HAProxy fails to reload it.
Keeping the old config and that requires my hands to fix it.

feie

use DNS record, do not use HTTP
https://letsencrypt.org/how-it-works/#domain-validation

https://github.com/acmesh-official/acme.sh/wiki/dnsapi