Native HTTPS / SSL support

From Domoticz
Revision as of 14:02, 24 February 2023 by Walter vl (talk | contribs)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search

Domoticz now has native HTTPS / SSL support since Version 2.2563 (June 14th 2015)

The https port is defined in /etc/init.d/domoticz.sh

DAEMON_ARGS="$DAEMON_ARGS -www 8080 -loglevel=normal"
DAEMON_ARGS="$DAEMON_ARGS -sslwww 443"
DAEMON_ARGS="$DAEMON_ARGS -log /var/log/domoticz.log"

-sslwww port (for example, -sslwww 443). https runs by default. Set port to 0 to ensure https socket won't be open.

-sslcert file_path (for example, -sslcert "D:\server_cert.pem" or -sslcert /opt/domoticz/server_cert.pem)

If no –sslcert parameter is provided, Domoticz will use a default SSL certificate "server_cert.pem" from its installation folder (emitted for domoticz.com). This default certificate will generate a security warning in your browser. But don't care. Accept the certificate and this browser won't bother you anymore.

Domoticz should be now available on https://my_domain_name.com

To access the system from outside your network, don't forget in your box/router to forwarding/NAT the ssl port (ie 443) to your system.

Procedure to generate a self certificate : https://www.domoticz.com/wiki/Native_secure_access_with_Lets_Encrypt

For more options for SSL support see page Command line parameters.

For more security settings check the wiki page Security