Want more timely Centmin Mod News Updates?
Become a Member

Beta Branch add letsdebug.net API check for nginx vhost routines in 123.09beta01

Discussion in 'Centmin Mod Github Commits' started by eva2000, Mar 22, 2020.

  1. eva2000

    eva2000 Administrator Staff Member

    58,893
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    4:09 PM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    add letsdebug.net API check for nginx vhost routines in 123.09beta01

    when LETSENCRYPT_DETECT='y' enabled, centmin.sh menu option 2, 22 and nv command runs will also do a letsdebug.net API check against the domain and save the result log at /root/centminlogs/letsdebug-yourdomain.com-${DT}.log where yourdomain.com is domain specified during nginx vhost creation and DT is date/timestamp.

    Continue reading...

    123.09beta01 branch


     
  2. eva2000

    eva2000 Administrator Staff Member

    58,893
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    4:09 PM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    example of output from log can be seen in this manual run of letsdebug.net API check

    checking my own centminmod.com domain by running 3 commands below
    Code (Text):
    ld=centminmod.com
    lid=$(curl -s --data "{\"method\":\"http-01\",\"domain\":\"$ld\"}" -H 'content-type: application/json' https://letsdebug.net | jq -r '.ID')
    sleep 10; curl -s -H 'accept: application/json' "https://letsdebug.net/$ld/${lid}" | jq
    

    results in output
    Code (Text):
    {
      "id": 114907,
      "domain": "centminmod.com",
      "method": "http-01",
      "status": "Complete",
      "created_at": "2020-03-22T13:13:45.229331Z",
      "started_at": "2020-03-22T13:13:45.231611Z",
      "completed_at": "2020-03-22T13:13:55.042274Z",
      "result": {
        "problems": [
          {
            "name": "CloudflareCDN",
            "explanation": "The domain centminmod.com is being served through Cloudflare CDN. Any Let's Encrypt certificate installed on the origin server will only encrypt traffic between the server and Cloudflare. It is strongly recommended that the SSL option 'Full SSL (strict)' be enabled.",
            "detail": "https://support.cloudflare.com/hc/en-us/articles/200170416-What-do-the-SSL-options-mean-",
            "severity": "Warning"
          }
        ]
      }
    }
    

    so as I am behind Cloudflare, I should get CF to Full SSL (strict) or Full SSL.