Browser now 'Refuses to connect'?

UCS - Univention Corporate Server
, ,
3

Morning :slight_smile:

I had checked the browser cache, apologies for missing that in my OP and good call. Apologies for the delay; CLI hasn’t been my bag since DOS 6.22 :wink: so I wanted to look up how to check rather than keep asking questions.

It is Apache2 failing to restart due to letsencrypt not having a certificate filed.

Regrettably, I am certain I caused this problem by choosing the option for ‘testing’ by thinking this would remain until manually changed. (I left a comment on the UCS blog for UCS with letsencrypt asking how to run UCS as a true ‘home’ Lan only system and never got a response), So I went ahead, tried it in ‘test’, and it worked; at that point.

This Server would be for internal Lan only and my thoughts are to only host for us ‘at home’. I still wish for it to send certificates to each machine. I set up let’s encrypt, realised the 30-day renewal, and placed it into testing mode; as I do not want to expose ports needlessly, presumably, I could more securely use ACME and Cron in Opnsense later.

I have two networks administrated by Opnsense, IoT and Lan. I own an Internet domain; however, I am not using it. I have a spare computer (awaiting VM’s) available on the IoT side of the network for this. I wanted to keep to best practice and keep the LAN side locked down.

I see the below as my options; I would be grateful for any further questions to aid in any advice toward moving down the correct path.

  1. Can I place let’s encrypt in a more permanent test mode to get it back up and running. If the effort does not outweigh doing this correctly?
  2. Do I remove let’s encrypt for now? If so, could I have some aid, please, as I cannot seem to find any pages on how to do this?
  3. Could I have some aid in doing this correctly via Opnsense to minimise risks, please?.
  4. Or, would it be better to setup a VM on the IoT PC and run a UCS read-only Server or similar; as perhaps the core of UCS is wholly designed to have internet access, and it would not be easy to run it as a secure and isolated ‘Home’ server ?
  • There is no ‘Home’ Category on the forum. Is there any chance one could be created? There are very few options for ‘Home’ Servers, fewer with AD in the Home environment (with at least two struggling), and many HomeLab’ers use PFSense / Opnsense. I would hope it could be helpful to all

My sincere thanks for your reply :smiley: