Cannot redirect to https

Przemyslaw3 years ago

Hello, I do everything like in the tutorial and install certbot with snap on my VPS debian 10 server. I add new hostname to my server on no-ip. Now I can login to my Traccar with https://myservername.ddns.net but I also can login with http://214.25.61.184:8082. I try many configurations of thet entry:

<VirtualHost *:80>
  ServerName myservername.ddns.net
  Redirect / https://myservername.ddns.net
</VirtualHost>

and

<VirtualHost *:8082>
  ServerName myservername.ddns.net
  Redirect / https://myservername.ddns.net
</VirtualHost>

<VirtualHost _default_:80>
  ServerName myservername.ddns.net
  Redirect / https://myservername.ddns.net
</VirtualHost>

the same tries with IP address:

<VirtualHost *:8082>
  ServerName 214.25.61.184
  Redirect / https://myservername.ddns.net
</VirtualHost>

<VirtualHost _default_:80>
  ServerName 214.25.61.184
  Redirect / https://myservername.ddns.net
</VirtualHost>

I don't have idea how to configure this wright.
Regards,
Przemek

Anton Tananaev3 years ago

This doesn't seem to be something specific to Traccar. It's probably better to check Apache related resources.

Przemyslaw3 years ago

Hi, @Anton Tananaev, thank You very much for answer. I will look at apache then.
Regards,
Przemek

Przemyslaw3 years ago

Hi Anton I figured that tutorial from documentation https://www.traccar.org/secure-connection/ don't redirect from default port http://myIP:8082. It redirect http://myIP:80 to https.
Regards.

Anton Tananaev3 years ago

Oh yeah, of course it doesn't.

Przemyslaw3 years ago

So, can You tell me how to change default port 8082 to 80? Can I do this? I try to mess something in traccar.xml file: add entry <entry key='web.port'>80</entry> I copy that from default.xml. But after restart traccar my server was broken.
Regards.

Anton Tananaev3 years ago

You won't be able to do a redirect from Traccar. Why do you need that?

Przemyslaw3 years ago

So it's safe when I can login to Traccar server with http? I think when I make SSL secure connection to my server it will disable possibility to enter from internet with http.
Regards.

Anton Tananaev3 years ago

The standard solution is to block internal port 8082 and only allow localhost connection to it. Why would you expose it externally?

Przemyslaw3 years ago

I install traccar on VPS in cloud. I just install default Traccar installation like in Traccar Documentation.

Anton Tananaev3 years ago

Obviously you have to use common sense and common security best practices when you host your own server.

Przemyslaw3 years ago

I have also openvpn server on the same VPS, can I do something like that:
I will only can login to Traccar Dashboard with http://10.8.0.1:8082? That is my VPN IP.