Adding a Let's Encrypt Certificate via Plesk

[goblin2k3 1]

Hello,

have emby-server running on a debian lxc in proxmox. It can be remotely accessed using a domain which directs to a Plesk VPS, which directs to a Zoraxy reverse proxy running on another debian lxc in proxmox (the Plesk VPS and the Zoraxy reverse proxy a part of a tailscale VPN, emby isn't). Plesk assigned some self-signed SSH certificate to the domain, which, of course, is not considered secure by my browser. Installing a Let's Encrypt certificate with Zoraxy had no effect - the domain is obviously under the control of Plesk. However, when I try to install a Let's Encrypt certificate there, I get the message "The authorization token is not available at http://<domain>/.well-known/acme-challenge/<token>. To resolve the issue, make sure that the token file can be downloaded via the above URL. " My question is, how can I make this path accessible? I cannot even find an .htaccess file on the emby lxc.

[Neminem 875]

Try this under Emby network settings.

Thats how I do it, just with NPM

[goblin2k3 1]

Already did that, but thank you.

I should probably mention that currently Zoraxy passes requests to port 8096, as for some reason, port 8920 is unusable, although it is definitely opened. Changing the local ports (e.g. to 80 and 443) will make emby inaccessible, even though I opened these. Zoraxy's port scanner will always show only port 8096 as open and only, if it is used by emby. Otherwise it will show no open ports (besides the ssh port 22).

[Neminem 875]

Ok don't know Zoraxy so can't really help you.

[Luke 40001]

If you can locate the server install folder, then you can probably place a file inside the dashboard-ui folder. 

[goblin2k3 1]

Finally figured out how to do it.

In case anyone else runs into the problem:

Plesk actually tries to install the certificate on the VPS it is installed on, not on the emby or zoraxy server. This means, you have to exclude the ".well-known" path from the proxy passing. To do this, just set a second rule in the Apache & nginx Settings of Plesk:

Quote

location ~ ^\/\.well-known.* {
    proxy_pass  http://localhost;
}
location / {
    proxy_set_header X-Forwarded-For $remote_addr;
    proxy_set_header Host $http_host;
    proxy_pass https://<emby-ip>;
}

 

[Luke 40001]

Thanks for coming back and following up !