Modification to omnibus installation

Troubleshooting
1

Summary
Changing the omnibus installation to use internal CA server

We are running mattermost-omnibus on Ubuntu 24.04.1 LTS and our initial install we installed without Let’s Encrypt with the command sudo MMO_HTTPS=false apt install mattermost-omnibus. We would like to now enable the encryption with either Let’s Encrypt or using our internal Certificate Authority. Is the best way to allow this is to make changes is to use mmctl to just change:

  1. The Let’s Encrypt flag to true
  2. Change the Forward80To443 to true
  3. Execute the mmomni reconfigure command?
    If we wanted to use our own CA, can we just use openssl to create keys and certificate request for our internal CA for a certificate file and just put the locations of these in the config file and follow steps 2 and 3?
2

Hi Kirk! First off, welcome to the forums! Second, great to see you exploring options for enabling encryption! You can find detailed guidance on configuring custom certificates and Let’s Encrypt in the Mattermost Omnibus documentation. Feel free to follow up here if you have any additional questions!