# Can Mattermost Omnibus be configured without letsencrypt

**URL:** <https://forum.mattermost.com/t/can-mattermost-omnibus-be-configured-without-letsencrypt/10741>\
**Category:** Troubleshooting\
**Created:** [November 17, 2020, 3:48pm UTC](https://forum.mattermost.com/t/can-mattermost-omnibus-be-configured-without-letsencrypt/10741 "2020-11-17T15:48:38Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![MarHerUMR](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mattermost.com/marherumr/32/4244_2.png) [@MarHerUMR](https://forum.mattermost.com/u/MarHerUMR)\
**Post date:** [November 17, 2020, 3:48pm UTC](https://forum.mattermost.com/t/can-mattermost-omnibus-be-configured-without-letsencrypt/10741/1 "2020-11-17T15:48:38Z")

</div>

Hi everybody,

I’m working a university and we are using Mattermost for our project. Right now we are transitioning from a manual install to Mattermost Omnibus.

Since we have an IT department with it’s own certificate authority we don’t need letsencrypt to generate the tls certificates for us. We already have the certificates on the installation the we migrate from.

In the ansible playbook `reconfigure.yml` certbot always runs and the nginx configuration is configured to the letsencrypt locations.

Is there an official way to _not_ use letsencrypt and configure nginx to use our own cert location?

Best regards  
Markus

---

<div class="post-metadata">

**Author:** ![ahmaddanial](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mattermost.com/ahmaddanial/32/2938_2.png) [@ahmaddanial](https://forum.mattermost.com/u/ahmaddanial)\
**Post date:** [November 17, 2020, 6:27pm UTC](https://forum.mattermost.com/t/can-mattermost-omnibus-be-configured-without-letsencrypt/10741/2 "2020-11-17T18:27:22Z")

</div>

Hello, @MarHerUMR

I can confirm that it is currently not possible using Omnibus only. It can be achieved configuring the SSL certificate in a different server that then routes the traffic to the Omnibus instance, that just needs to be configured with `https: false`.

---

<div class="post-metadata">

**Author:** ![MarHerUMR](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mattermost.com/marherumr/32/4244_2.png) [@MarHerUMR](https://forum.mattermost.com/u/MarHerUMR)\
**Post date:** [November 18, 2020, 9:57am UTC](https://forum.mattermost.com/t/can-mattermost-omnibus-be-configured-without-letsencrypt/10741/3 "2020-11-18T09:57:50Z")

</div>

Hello @ahmaddanial,

thanks for the quick feedback. I followed your suggestions and Mattermost itself seem to work fine.

But there are some smaller problems I see with the approach. Aftern installing Mattermost for the first time ansible will start nginx using port 80. In order to server port 80 with another web server (in our case apache2) I have to stop the service, then start the other web server. When updating Mattermost ansible will try to (re)start nginx again, but will fail, because port 80 is already in use.

I think for institutions like our it department it would be a great improvement, when the Mattermost Omnibus package would support the use of your own certificate. The playbook already loads configuration from `/etc/mattermost/mmomni.yml`. I think it should be possible to use `ssl_certificate_key` and `ssl_certificate` as variables here and change the playbook slightly in order to make the certificates customizable and the certbot optional.

I had a look around where I could suggest this feature, or even provide a pull-request, but I’m not sure where to do so. Could you please give me a hint where I should make the suggestion?

---

<div class="post-metadata">

**Author:** ![ahmaddanial](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mattermost.com/ahmaddanial/32/2938_2.png) [@ahmaddanial](https://forum.mattermost.com/u/ahmaddanial)\
**Post date:** [November 18, 2020, 6:39pm UTC](https://forum.mattermost.com/t/can-mattermost-omnibus-be-configured-without-letsencrypt/10741/4 "2020-11-18T18:39:40Z")

</div>

Hello, @MarHerUMR

I talked to the engineering team about this and have the following request created:

- [Support using a custom nginx template to generate the configuration in Omnibus](https://mattermost.atlassian.net/browse/MM-30730)

Hope that helps.

---

<div class="post-metadata">

**Author:** ![MarHerUMR](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mattermost.com/marherumr/32/4244_2.png) [@MarHerUMR](https://forum.mattermost.com/u/MarHerUMR)\
**Post date:** [November 19, 2020, 8:47am UTC](https://forum.mattermost.com/t/can-mattermost-omnibus-be-configured-without-letsencrypt/10741/5 "2020-11-19T08:47:47Z")

</div>

Hello @ahmaddanial,

yes, this helps a lot. Thank you!

---

<div class="post-metadata">

**Author:** ![ahmaddanial](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mattermost.com/ahmaddanial/32/2938_2.png) [@ahmaddanial](https://forum.mattermost.com/u/ahmaddanial)\
**Post date:** [November 19, 2020, 11:31am UTC](https://forum.mattermost.com/t/can-mattermost-omnibus-be-configured-without-letsencrypt/10741/6 "2020-11-19T11:31:35Z")

</div>

Hi, @MarHerUMR

You are most welcome. Any time!

---

<div class="post-metadata">

**Author:** ![micheal](https://avatars.discourse-cdn.com/v4/letter/m/edb3f5/32.png) [@micheal](https://forum.mattermost.com/u/micheal)\
**Post date:** [September 11, 2023, 2:37pm UTC](https://forum.mattermost.com/t/can-mattermost-omnibus-be-configured-without-letsencrypt/10741/7 "2023-09-11T14:37:46Z")

</div>

Hi All, i have installed mattermost omnibus on ubuntu server, how to configure the own ssl certificate on ubuntu server

---

<div class="post-metadata">

**Author:** ![john.combs](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mattermost.com/john.combs/32/7118_2.png) [@john.combs](https://forum.mattermost.com/u/john.combs)\
**Post date:** [September 14, 2023, 6:52pm UTC](https://forum.mattermost.com/t/can-mattermost-omnibus-be-configured-without-letsencrypt/10741/8 "2023-09-14T18:52:08Z")

</div>

Heya Michael! There is a guide [here](https://docs.mattermost.com/install/installing-ubuntu-2004-LTS.html) that should hopefully help. Feel free to let us know if you have any additional questions!
