Yes, just started it again. New Vm, clean Ubuntu 20.04 fully updated/upgraded. No errors at installation. Configuration of virtualmin also shows no errors. External adress is recognised as…27.1, but I changed it in the network settings to use …27.27. Seems to work. Installed a virtual server at decentraalinternet.nl again. It uses the correct ns1 and ns2.hostservicedns.com this time. SSL certificate is requested without any problems:
It is normal for virtualmin to use the external IP address for the DNS. You should not change this to be on an internal IP address.
The Ubuntu server will have an internal IP address but all of the DNS needs to have the external IP address.
Also, your browser, clear the cache or try using privacy mode. Try ctrl+F5 etc .
Also I am not sure your router supports NAT reflection so you need to use split DNS. Simple answer is to put an entry for the domain name in your hosts file of your pc, but here you would use the internal IP. This is not split DNS but should allow you to work. Split DNS is where you put an entry in your DNS resolver on your router and again here you would use the local IP address of the Ubuntu server
An Example Setup
external IP: 171.171.171.171
ubuntu server IP: 10.0.0.50
Port forward from 171.171.171.171 to 10.0.0.50 both UDP and TCP
80 - http
443 - https
53 - DNS
For access you website from your local network do one of 2 things
Split DNS - set each domain you host to have a record pointing to 10.0.0.50 in your routers DNS resolver
Hosts file - add an entry in our windows hosts file for 10.0.0.50
Check from the internet and not your local network to see if things are working. best way is to use your mobile but turn the wifi off. VPN can work but mught have issue with dns.
I understand it needs an external address. But the external address os the address of the VM at 27.27, not the router. FYI, this is a massive HP server running a dozen VM’s in a datacenter behind that router at …27.1.
Regarding yoru split DNS…now you’re losing me, simply because of lack of knoweldge. But since all other services behind that router are reachable, I can’t image that device suddenly has an issue? But again, newbie here.
I tried reaching https://decentraalinternet.nl from several devices, VPN and browsers and although the error message changes, it won’t load. I assume you all see the same thing??
so we can exclude any problems with the vm running behind a domestic router
so this only leaves apache configuration as @stefan1959 mentioned way back, it would be good to see the apache configuration for the domain you can view that at
Webmin->Servers->Apache Webserver->server name (443)->Edit Directives
from that you/we might be able to see an error in the config also restart the apache server, using the terminal as the root user
using
service apache2 restart && service apache2 status
and looking at the output from that to see if there are any errors
I would also turn off IPV6 as you get
<Directory /home/decentraalinternet/cgi-bin>
Require all granted
AllowOverride All Options=ExecCGI,Includes,IncludesNOEXEC,Indexes,MultiViews,SymLinksIfOwnerMatch
Last; by no means I’m looking for anyone to (unpaid) help me out, but since we’re still in a testing phase, I would have no problems creating another user with root access if anyone would like to dive in themselves?
with a random domain name, i.e. chocolatefactory123.com , use windows host file override an see if it loads normally. This might also fix the other sites.
don’t install a lets encrypt SSL
Try using PHP-FPM , I am not sure this will fix it but it is worth a go
Try my SSLProtocol statement
re-run the Virtualmin wizard. you can do this without re-installing. I would also do the advanced section aswell as I always go through this bit myself.
In general, there are no major technical differences between [SSL] and TLS protocols, however, both have specific standards.
TLS can operate on different ports and uses stronger encryption algorithms, such as Keyed — Hashing for Message Authentication Code (HMAC). SSL only uses the Message Authentication Code (MAC) algorithm.
Because I did it on mine when I had this issue. When I did not have any configure virtual servers adding one finished whatever Virtualmin needed to do and then it works so it might help here.
hmm just made loads of irrational decisions when creating a domain, creating a new domain did not help, I guess you were lucky. The issue here seems to be a mixture of things, but you are right that the OP needs to fix the ‘wrong site showing up’ issue first before continuing
I don’t know if in all distro options the result is the same. I did a test with my websites online at Virtualmin → System Settings → ReCheck Configuration.
I found that on each VM > Web Configuration → Configure SSL Website → SSL Options → Two options are active TLSv1.2 and TLSv1.3.
Everything works.
the ip in the decentraallinternet.nl virtual hosts file 10.20.4.2 change to 178.251.27.27 and remove the ipv6 address (for now) and restart apache, then try
