IMPORTANT: Replace your-domain with the actual domain of your UTMStack Service, e.g., .yourdomain.com.

​
1. Generate SSL Certificate with Certbot

​
Install Certbot and Nginx (Required only for Method 1 and 2)

sudo apt update  
sudo apt install certbot python3-certbot-nginx nginx

​
Pause the frontend container

sudo docker pause id_container_frontend

​
Start Nginx

sudo systemctl start nginx

sudo certbot --nginx -d <your-domain>

​
Method 2 – Certbot Manual with DNS Validation, use this if DNS challenge is required.

sudo certbot certonly --manual \
  --preferred-challenges=dns \
  --email info@<your-domain> \
  --server https://acme-v02.api.letsencrypt.org/directory \
  --agree-tos \
  -d <your-domain>

​
Create the DNS TXT Record, Access your DNS management console and add a TXT record:

  • Type: TXT
  • Name: _acme-challenge. your-domain
  • Value: (provided by Certbot)

Wait for DNS propagation before continuing.

​
Method 3 – Using Certificates from a Trusted Certificate Authority (CA)

Use this method if you already have an SSL certificate issued by a third-party CA (e.g., DigiCert, GoDaddy, etc.). This method does not require Nginx or Certbot.

​
Replace existing certificates

​
1. Copy the provided certificate and private key files:

sudo cp your_certificate.crt /utmstack/cert/utm.crt  
sudo cp your_private_key.key /utmstack/cert/utm.key

​
Stop the frontend container, use docker ps to identify the container ID:

sudo docker stop id_container_frontend

Restart the frontend container or related services if necessary.

​
Stop and Disable Nginx (Only if used for Method 1 or 2)

sudo systemctl disable nginx  
sudo systemctl stop nginx

​
Pause the frontend container

sudo docker pause id_container_frontend

​
Start Nginx

sudo systemctl start nginx

​
Renew Certbot Certificates

sudo certbot renew

​
Stop and Disable Nginx

sudo systemctl disable nginx  
sudo systemctl stop nginx

​
Update Certificates in UTMStack

sudo cp /etc/letsencrypt/live/<your-domain>/fullchain.pem /utmstack/cert/utm.crt  
sudo cp /etc/letsencrypt/live/<your-domain>/privkey.pem /utmstack/cert/utm.key

​
Stop the frontend container

sudo docker stop id_container_frontend

​
Final Notes

  • Certbot stores your certificates at: /etc/letsencrypt/live/your-domain/
  • Check expiration with:
sudo certbot certificates

Ensure your DNS provider supports TXT records for Method 2 – DNS Validation.