how to setup and access OLS Web admin?

[alexw1980]

I just deployed openlitespeed-wordpress on GCP and want to setup SSL. I'm stuck at accessing the OLS WebAdmin.

So far here's what I know that need to be done (appreciate if anyone can point out any mistakes)

1. SSH from VM instances

2. install Certbot to get Let's Encrypt cert

sudo apt-get update
sudo apt-get install software-properties-common
sudo add-apt-repository universe
sudo add-apt-repository ppa:certbot/certbot
sudo apt-get update
sudo apt-get install certbot

2. Get the certificate and chain

/etc/letsencrypt/live/YOUR_DOMAIN/fullchain.pem
/etc/letsencrypt/live/YOUR_DOMAIN/privkey.pem

3. Configure OpenLiteSpeed for SSL - STUCK

 

[Cold-Egg]

Hi @alexw1980,

Certbot is installed already, no need to install it again, follow this step 3 to automatically apply LE cert easily.
https://docs.litespeedtech.com/cloud/wordpress/#step-3

If you still need web admin access, please check https://docs.litespeedtech.com/cloud/wordpress/#web-server-control-panel-access. You need to allow port 7080.

ufw allow 7080

Let me know if you have any questions.

Best,
Eric

 

[alexw1980]

Thanks Eric! For Step #3, it states "An interactive script that runs will first prompt you for your domain or subdomain."

Is there a command to run this script? My steps before this V(M Instances > connect via SSH) just brings me to a prompt screen

I managed to access OLS webadmin thanks for this!

 

[Cold-Egg]

Great.

It's here `/opt/domainsetup.sh` (https://raw.githubusercontent.com/litespeedtech/ls-cloud-image/master/Setup/domainsetup.sh ) which only works for the first domain. For the second one, please use https://docs.litespeedtech.com/cloud/wordpress/#how-do-i-create-additional-virtual-hosts method.

Best,
Eric

 

[alexw1980]

Thanks again Eric, but I'm getting -bash: /opt/domainsetup.sh: No such file or directory
after typing this in:

/opt/domainsetup.sh

 

[alexw1980]

btw, I've already got wordpress installed

 

[Cold-Egg]

You probably complete it before. If not, download the script and add +x permission to it, then run it.

wget https://raw.githubusercontent.com/litespeedtech/ls-cloud-image/master/Setup/domainsetup.sh
chmod +x domainsetup.sh
./domainsetup.sh

 

[alexw1980]

Hi Eric, I verified my email, but get this error now:

The following error was encountered:
[Errno 13] Permission denied: '/var/log/letsencrypt/.certbot.lock'
Either run as root, or set --config-dir, --work-dir, and --logs-dir to writeable paths.
Oops, something went wrong...

 

[Cold-Egg]

Try sudo domainsetup.sh

Otherwise, possibly that the certbot got messed up due to you manually installed earlier. Then you may want to check https://docs.litespeedtech.com/cloud/wordpress/#step-3-certbot see if you can manually apply.

 

[alexw1980]

Hi Eric, I managed to create my cert using

certbot certonly --webroot -w /var/www/html/ -d example.com -d www.example.com

Have also gone through :Step 4. Set SSL for HTTPS
and Step 5. Redirect HTTP to HTTPS

What are my next steps?

Do I have to go into WordPress Address (URL) and Site Address (URL) and change it from http > https?

Many thanks!

 

[alexw1980]

Hi Eric, I've used the Really Simple SSL plugin on Wordpress and now it's secured! Should there be anything else about SSL that I should do/best practices?

 

[Cold-Egg]

Yes you can " go into WordPress Address (URL) and Site Address (URL) and change it from http > https ".

Since you already have the HTTP/HTTPS available and force HTTPS, I don't think you need very simple SSL more.

 

[alexw1980]

Appreciate it Eric! Also, can you point me to some instructions to auto-renew the cert?

 

[Cold-Egg]

If you setup from the prompt script, it will auto set the cronjob + lsws hook for you
https://github.com/litespeedtech/ls-cloud-image/blob/master/Setup/domainsetup.sh#L193-L201

You can also manually edit `/etc/cron.d/certbot` and put --deploy-hook "/usr/local/lsws/bin/lswsctrl restart" in the end of the certbot cronjob.

 

[alexw1980]

Thanks again Eric, is there a way to check if auto-renew is already set? if so, can you post the commands?

 

[Cold-Egg]

Check with command:

grep 'certbot -q renew' /etc/cron.d/certbot

This is default certbot rule.

0 */12 * * * root test -x /usr/bin/certbot -a \! -d /run/systemd/system && perl -e 'sleep int(rand(43200))' && certbot -q renew

If renew set for litespeed, should looks like this:

0 */12 * * * root test -x /usr/bin/certbot -a \! -d /run/systemd/system && perl -e 'sleep int(rand(43200))' && certbot -q renew --deploy-hook "/usr/local/lsws/bin/lswsctrl restart"

 

[alexw1980]

Wow thanks Eric! I input the command

grep 'certbot -q renew' /etc/cron.d/certbot

and it returned

0 */12 * * * root test -x /usr/bin/certbot -a \! -d /run/systemd/system && perl -e 'sleep int(rand(43200))' && certbot -q renew

This means auto-renew is not set, correct?

 

[Cold-Egg]

It means certbot renew cronjob is there, but you need to add the "hook" to restart litespeed web server.

 

[alexw1980]

Hi Eric, is this the command to run?

/usr/local/lsws/bin/lswsctrl restart.

 

[alexw1980]

Hi Eric, I tried this command

--deploy-hook "/usr/local/lsws/bin/lswsctrl restart"

but doesn't do anything?