1"use strict";(self.webpackChunkcaprover_docs_site=self.webpackChunkcaprover_docs_site||[]).push([["8595"],{8926(e,t,n){n.r(t),n.d(t,{metadata:()=>r,default:()=>p,frontMatter:()=>a,contentTitle:()=>i,toc:()=>d,assets:()=>c});var r=JSON.parse('{"id":"domains/https","title":"HTTPS","description":"CapRover uses Certbot to request certificates for the dashboard and app domains. Before clicking Enable HTTPS, make sure the exact hostname resolves to the intended server, external port 80/tcp reaches CapRover for the normal HTTP challenge, and 443/tcp is open for HTTPS traffic.","source":"@site/../content/en/docs-next/domains/https.md","sourceDirName":"domains","slug":"/domains/https","permalink":"/docs-next/domains/https","draft":false,"unlisted":false,"editUrl":"https://github.com/caprover/caprover-website/edit/master/content/en/docs-next/domains/https.md","tags":[],"version":"current","frontMatter":{"id":"https","title":"HTTPS","slug":"/domains/https"},"sidebar":"preview","previous":{"title":"Custom Domains","permalink":"/docs-next/domains/custom-domains"},"next":{"title":"Certificate Renewal","permalink":"/docs-next/domains/certificate-renewal"}}'),s=n(4848),o=n(8453);let a={id:"https",title:"HTTPS",slug:"/domains/https"},i,c={},d=[];function l(e){let t={a:"a",code:"code",p:"p",strong:"strong",...(0,o.R)(),...e.components};return(0,s.jsxs)(s.Fragment,{children:[(0,s.jsxs)(t.p,{children:["CapRover uses Certbot to request certificates for the dashboard and app domains. Before clicking ",(0,s.jsx)(t.strong,{children:"Enable HTTPS"}),", make sure the exact hostname resolves to the intended server, external port ",(0,s.jsx)(t.code,{children:"80/tcp"})," reaches CapRover for the normal HTTP challenge, and ",(0,s.jsx)(t.code,{children:"443/tcp"})," is open for HTTPS traffic."]}),"\n",(0,s.jsxs)(t.p,{children:["For the dashboard, set the root domain and confirm ",(0,s.jsx)(t.code,{children:"http://captain.<root-domain>"})," works. Enable dashboard HTTPS in settings, visit the HTTPS URL, verify its certificate, then enable ",(0,s.jsx)(t.strong,{children:"Force HTTPS"}),". For an app, test the app domain over HTTP first, enable HTTPS in its HTTP settings, verify the certificate, and only then force HTTPS."]}),"\n",(0,s.jsxs)(t.p,{children:["Wildcard DNS makes names resolve; it does not create one wildcard certificate. Each hostname still needs appropriate certificate handling. For a reverse proxy, ensure the ACME validation request reaches CapRover or deliberately configure a supported alternative challenge. See ",(0,s.jsx)(t.a,{href:"/docs-next/domains/advanced-certbot",children:"Advanced Certbot / ACME"}),"."]})]})}function p(e={}){let{wrapper:t}={...(0,o.R)(),...e.components};return t?(0,s.jsx)(t,{...e,children:(0,s.jsx)(l,{...e})}):l(e)}},8453(e,t,n){n.d(t,{R:()=>a,x:()=>i});var r=n(6540);let s={},o=r.createContext(s);function a(e){let t=r.useContext(o);return r.useMemo(function(){return"function"==typeof e?e(t):{...t,...e}},[t,e])}function i(e){let t;return t=e.disableParentContext?"function"==typeof e.components?e.components(s):e.components||s:a(e.components),r.createElement(o.Provider,{value:t},e.children)}}}]);
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.