Vesta Control Panel - Forum

$rcmail_config['force_https'] = false;
$rcmail_config['use_https'] = false;

$rcmail_config['force_https'] = true;
$rcmail_config['use_https'] = true;

location ~ /(config|temp|logs) {

    if ($scheme = http) {
        return 301 https://$server_name$request_uri;
    }

service nginx restart

The option for postgre support is un-editable (greyed out) with the option [no] selected.

Aliraza521 wrote:My server is sending thousands of unauthorized emails. And what I realized some robot takes advantage of exim's relay is open.????


Ali

#force SSL usage
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [R,L]

joem wrote: ↑

Sat Jan 09, 2016 7:01 am

Before I start I am using centos 7 with nginx and phpfpm.

To force webmail to use ssl you need to do the follow,

Edit /etc/roundcubemail/main.inc.php

Find

Code: Select all

$rcmail_config['force_https'] = false;
$rcmail_config['use_https'] = false;

Change To

Code: Select all

$rcmail_config['force_https'] = true;
$rcmail_config['use_https'] = true;

This will not allow users to login unless they are using a https url round cube will display "Invalid request! no data was saved" ever time you try and login without https. Now you need to setup a redirect in apache or nginx webmail.inc file.

Edit /etc/nginx/conf.d/webmail.inc

Find

Code: Select all

location ~ /(config|temp|logs) {

Add Above

Code: Select all

    if ($scheme = http) {
        return 301 https://$server_name$request_uri;
    }

Now restart nginx

Code: Select all

service nginx restart

The option for postgre support is un-editable (greyed out) with the option [no] selected.

Are you able to login to phppgadmin? I just noticed on my fresh install of vestacp phppgadmin is not configured right. The reason I asked is before the vesta team had that greyed out not sure if its that way still in the new release.