Search results

Here are my additional nginx directives for my websites. It includes caching, compressing, enabling OCSP with Let's Encrypt and certain headers for security. My question is in regards to the settings required for Wordpress to work correctly. The particular setting is: #Necessary to enable...

Come to find out, the issue was entropy... here is an excerpt from Plesk Development Support that fixed the issue. This had to do with DNSSEC keys that were created during implementation of DNSSEC. There is not enough entropy, bind will hang on /dev/random stage. We see two possible solutions...

/var/log/syslog May 6 20:22:46 bh01 systemd[1]: Reloading BIND Domain Name Server. May 6 20:22:46 bh01 rndc[26438]: WARNING: key file (/etc/bind/rndc.key) exists, but using default configuration file (/etc/bind/rndc.conf) May 6 20:24:16 bh01 systemd[1]: bind9.service: Reload operation timed...

I have 10 domains but add some aliases for my domains. It is used a workaround for mail to create a "mail" alias so I could use LE certificate. I would delete the A record on the primary domain and then create a "mail" alias for that domain. Update primary domain LE with the alias domain...

Additional information... If I delete the primary domain, and re-create it, things work super fast and DNS updates work fine. Comment, DNS updates to any domain on my Plesk instance. Before deleting the primary domain, any record change to any domain on Plesk took almost 2 minutes. plesk...

Anytime I make record changes to DNS in Plesk, the change will take over 2 minutes and then my secondary service is not able to communicate with my Plesk instance. This is not behavior I'm used to as in the past, as soon as I make DNS changes, I'm able to force an update with secondary service...

Here is the official response from Plesk... How to change DNS server in domain SOA record Question How to change DNS server SOA record of a particlular domain? Answer Currently, Plesk generates SOA records automatically with the first NS record added. There is no any functionality to...

@UFHH01 advice was spot on. I was able to just renew my certificates without deleting the existing ones. I just had to be sure my browser cache was deleted before browsing to the domain again. Before following the advice of @Linulex be sure to delete your browser cache as you shouldn't need...

Make sure the certificate is setup for the domain and working then you should be able to use the following command per domain in the nginx additional directives field: #Enable OCSP ssl_stapling on; ssl_stapling_verify on; resolver 8.8.4.4 8.8.8.8 valid=300s; resolver_timeout 10s;

In working with Plesk support they were able to resolve the issue with SELINUX permissions blocking the LE certificate directory. We were unable to replicate the problem on brand new systems. We also identified that we do not have to identify the certificate as Plesk already identifies the...

I created a support ticket with Plesk and received the following statement, "The server hardening as per DISA or CIS benchmarks should not cause any issues with Plesk operations normally."

I will be using Debian or Ubuntu server to deploy a new instance of Onyx. Here are some questions regarding steps to harden my OS before loading Onyx or additional software... 1. CIS Benchmark: Does Plesk Onyx support a server OS that has been pre-hardened with the CIS benchmark? Are there...

The actual issue is: SELinux is stopping the ability for nginx to access the /usr/local/psa/var/modules/letsencrypt/etc/ directory. Plesk support has placed an internal request into Plesk development to look into this for a formal update to resolve.

Based on the grep results, what command should I enter? Regarding Plesk Onyx vs Plesk 12.x I will be sure to post new issues in proper forum. For this issue would you prefer I create the question under the Onyx forum and we can resume under that one?

grep nginx /etc/group psaserv:x:1002:psaadm,psaftp,apache,nginx nginx:x:991:nginx grep apache /etc/group psaserv:x:1002:psaadm,psaftp,apache,nginx apache:x:48:apache,tortix psasb:x:1009:psaadm,apache

Would the exact command for CentOS be: usermod -aG psacln apache

grep psaserv /etc/group psaserv:x:1002:psaadm,psaftp,apache,nginx I have CentOS 7.3.1611 with Plesk Onyx Version 17.0.17 Update #22 So before making these additional changes... can I ask the elephant in the room question. Assuming I don't go around making backend changes to this production...

I uncommented user nginx; and successfully restarted the nginx service. Went into additional directives and uncommented pem location, clicked apply which seemed to place it in a perpetual submitting state where the "apply" button says "please wait" and received this error in gui: Internal error...

I created a bug report with the letsencrypt plesk extension. LE 2.0.2 Rel 29 - nginx permission errors trying to reference Let's Encrypt certificates within Plesk Onyx nginx additional directives · Issue #161 · plesk/letsencrypt-plesk · GitHub There shouldn't be any reason why Plesk/nginx...

Permissions of workaround folder: ls -lah /etc/ssl total 20K drwxr-xr-x. 2 root root 4.0K Apr 8 12:27 stapling Permissions of workaround pem file: ls -lah /etc/ssl/stapling/chain.pem -rw-r--r--. 1 root root 1.7K Apr 8 12:27 /etc/ssl/stapling/chain.pem I copied the file back into the...