Switching your office to HTTPS when installing from RPM/DEB packages

Introduction

When you install ONLYOFFICE Workspace Enterprise Edition using the script, you have the option to install it from RPM/DEB packages rather than using Docker. But in this case, the HTTPS section will be absent from the Control Panel. You can still switch your portal to HTTPS.

Starting with version 9.1, the letsencrypt.org service and script allow you to create a CA-signed certificate and switch the portal to HTTPS with a single command.

The article below will explain how this can be done. To install your own certificate, please refer to this article.

Switching to HTTPS using script

Run the following script:

bash /var/www/onlyoffice/Tools/letsencrypt.sh yourdomain.com subdomain1.yourdomain.com subdomain2.yourdomain.com

Where yourdomain.com is the address of the domain where your ONLYOFFICE Workspace Enterprise Edition portal is installed, and subdomain1.yourdomain.com and subdomain2.yourdomain.com (and any other subdomains separated with a space) are the subdomains for the main domain which you use.

The script will automatically create and install the letsencrypt.org CA-signed certificate to your server and restart the NGINX service for the changes to take effect.

Now, your portal should be available using the https:// address.

Creating the letsencrypt.org certificate manually

If you do not want to use the script, you can perform the same actions manually. To be able to create the letsencrypt.org CA-signed certificate manually, you need to go to the Getting started section of the letsencrypt.org website and follow the instructions on how to add Certbot ACME client to your server.

WarningOnly follow the Install section instructions of the Certbot website. If you execute commands from the Get Started section, your NGINX config file will be overwritten, and the service will not start correctly.
Please note that you will need shell access to your server to be able to install both Certbot ACME client and CA-signed certificate from letsencrypt.org
Article with the tag:
Browse all tags