SSL Configuration

In EasyDCIM 1.25.0+, SSL management for the main platform is handled through easydcim-control.

For the general Docker workflow, see Docker Management with easydcim-control.

Default SSL certificate

A self-signed SSL certificate is generated automatically during easydcim-control app install.

For production environments, replace it with either:

  • a Let’s Encrypt certificate
  • a paid/custom certificate

Free Let’s Encrypt certificate

To request a certificate for the main EasyDCIM domain, run:

sudo easydcim-control app ssl letsencrypt install panel.example.com

To renew the certificate manually:

sudo easydcim-control app ssl letsencrypt renew

To remove the Let’s Encrypt certificate and return to the default self-signed certificate:

sudo easydcim-control app ssl letsencrypt remove

Automatic renewal

easydcim-control app ssl letsencrypt install configures the renewal workflow automatically. You do not need to run manual Apache or Certbot commands on the host.

To install your own certificate files, run:

sudo easydcim-control app ssl install /etc/ssl/mydomain/fullchain.pem /etc/ssl/mydomain/privkey.pem panel.example.com

This command:

  • installs the certificate into the EasyDCIM stack
  • reloads the application service
  • updates the EasyDCIM base URL to the provided HTTPS domain

Domain configuration in EasyDCIM

When you use easydcim-control app ssl install or easydcim-control app ssl letsencrypt install, the CLI automatically updates the main EasyDCIM URL.

If you still need to change the URL manually, use shell passthrough:

easydcim-control app shell -- php artisan settings:change "common.url.default" "https://panel.example.com"

If you need to reset the configured URL because the current domain is not working properly, run:

easydcim-control app shell -- php artisan settings:change "common.url.default" ""

Once the domain value is reset, you will be able to access the backend by using the server IP address again.

Client Area SSL

  • If the Client Area is installed locally on the same host as EasyDCIM, it uses the same SSL configuration as the main EasyDCIM platform.
  • If the Client Area is installed externally, manage its certificate separately by using the commands described in Client Area Configuration.