Skip to main content

Plex and LetsEncrypt

Work in Progress:

Plex and LetsEncrypt

So... I'm not entirely sure where to begin with all this. And this write-up is a mess (right now). I was not certain this was going to work and therefore I was not keeping absolute notes.
Apache webserver allowing 80/443 through my firewall.
- www.linuxrevolution.com
- plex.linuxrevolution.com
Plex Media Server currently running on OSX Mac Mini at port 32400 (standard port)
I own a domain "linuxrevolution.com" and I also have a Plex Media Server running on any particular system (Mac Mini/OSX, Nvidia Shield TV, Linux).
On my webserver, I am using CertBot
- create a webroot (vhost) on your Apache Server.

wget https://dl.eff.org/certbot-auto
chmod a+x certbot-auto
./certbot-auto 


./certbot-auto certonly -d plex.linuxrevolution.com --webroot

openssl pkcs12 -export -out ~/plex_linuxrevolution_com.pfx \
  -inkey /etc/letsencrypt/archive/plex.linuxrevolution.com/privkey1.pem \
  -in /etc/letsencrypt/archive/plex.linuxrevolution.com/cert1.pem \
  -certfile /etc/letsencrypt/archive/plex.linuxrevolution.com/chain1.pem

- Enter a passphrase

Getting the certs downloaded locally.
You then have to create the pkcs12 file and you will be asked for a passphrase which you will need to enter in your Plex configuration.
Custom certificate location /Users/jradtke/Music/plex_linuxrevolution_com.pfx
Custom certificate encryption key <this is the key you used when you created the pkcs12 file>
Custom certificate domain plex.linuxrevolution.com

Review Logs
cp /Users/jradtke/Library/Logs/Plex Media Server
grep CERT Plex\ Media\ Server.log 

I'd like to thank:

Comments

  1. I recently wrote a script to automate the install and update of letsencrypt certificates on a plex server that is running on Ubuntu.

    https://oisec.net/blog/plex-letsencrypt

    ReplyDelete

Post a Comment

Popular posts from this blog

PXE boot a LiveCD image

Summary: I have wanted to build a kickstart environment which hosted a "rescue CD" or LiveCD to allow you to boot over the network after you blew your stuff up and needed to repair a few things.  Today I have worked through a method of doing so, with the help of the people who published a succinct script with the Red Hat Enterprise Virtualization Hypervisor.  (the script will be at the bottom of this post - if I have somehow not followed the GPL, please let me know and I will correct whatever is necessary) NOTE/Warning: The boot will fail due the initrd being too large (645mb).  I'm not sure how to proceed.  This procedure worked for RHEVh, because it is quite a bit smaller.  Hopefully I can report back with progress on this? :-$ Procedure: download your LiveCD image to /export/isos/RESCUE/Fedora-16-i686-Live-Desktop.iso # cd /var/tmp # vi livecd-iso-to-pxeboot (populate the file with the script shown below) # chmod 754 ./livecd-iso-to-pxeb...

"Error getting authority: Error initializing authority: Could not connect: No such file or directory (g-io-error-quark, 1)"

"Error getting authority: Error initializing authority: Could not connect: No such file or directory (g-io-error-quark, 1)" One issue that may cause this to arise is if you managed to break your /etc/fstab We had an engineer add a line with the intended options of "nfsvers=3" but instead added "-onfsvers=3" and it broke the system fairly catastrophically.

P2V using dd for KVM-QEMU guest

Preface: I have certainly not exhaustively tested this process.  I had a specific need and found a specific solution that worked. Situation:  I was issued a shiny new laptop running Red Hat Enterprise Linux 7 (with Corp VPN, certs, Authentication configuration, etc...)  The image was great, but I needed more flexibility on my bare metal.  So, my goal was to P2V the corporate image so I could just run it as a VM. * Remove corporate drive and install new SSD * install corp drive in external USB-3 case * Install RHEL 7 on new SSD * dd old drive to a disk-image file in a temp location which will be an image which is the same size as your actual drive (unless you have enough space in your destination to contain a temp and converted image) * convert the raw disk-image to a qcow file while pushing it to the final location - this step should reduce the disk size - however, I believe it will only reduce/collapse zero-byte blocks (not just free space - i.e. if you de...