Guide to setting up HTTPS access

[Sup...@hb-it.co.uk]

I am trialing ATOM using the vagrant per built system, are there any guides on how to setup so https works? or is this more for a linux/apache forum?

Thanks, G

[Dan Gillean]

Hi there, 

A couple of things to mention here. 

First, the Vagrant box is intended only for local testing and development - it is NOT intended for use in a production environment! If you want your AtoM site to be persistent and available on the web for others to use, we strongly recommend a full server installation as outlined in our documentation, here: 

• https://www.accesstomemory.org/docs/latest/admin-manual/installation/linux/ubuntu-xenial/
  

You can certainly create a production-ready installation using virtualization, but the Vagrant box has limited resources assigned to it and is intended for use on a local computer. 

Second, setting up HTTPS is a webserver configuration issue, to be handled separately from AtoM installation. It's not something we maintain documentation for. Generally, it involves getting a certificate from a Certificate Authority (CA) for your domain. However, Artefactual makes use of LetsEncrypt for our hosting services, which is a free, automated CA. I've never tried to set up a certificate for a local Vagrant box since they are not generally available on the web, but you could look into it with them: 

• https://letsencrypt.org/getting-started/
  
• https://certbot.eff.org/lets-encrypt/ubuntuxenial-nginx
  

Good luck! 

Dan Gillean, MAS, MLIS
AtoM Program Manager
Artefactual Systems, Inc.
604-527-2056

@accesstomemory

On Mon, Oct 8, 2018 at 6:09 AM <Sup...@hb-it.co.uk> wrote:

I am trialing ATOM using the vagrant per built system, are there any guides on how to setup so https works? or is this more for a linux/apache forum?

Thanks, G

--
You received this message because you are subscribed to the Google Groups "AtoM Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ica-atom-user...@googlegroups.com.
To post to this group, send email to ica-ato...@googlegroups.com.
Visit this group at https://groups.google.com/group/ica-atom-users.
To view this discussion on the web visit https://groups.google.com/d/msgid/ica-atom-users/723d2618-7061-444c-b1ae-912541937d9f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[looksli...@gmail.com]

Thanks for the response. I will not be using the vagrant setup for production as you say a clean manual install is the best way for production. I will check out the letsencrypt option that could be interesting. I no longer need https for the trial, we have secured the system using firewall and MAC access control to at least limit wider access so https is not required for the 2 users testing.

Cheers, G