Instalasi SSL Let’s Encryt pada Odoo ERP

Pada saat instalasi awal Odoo maka kita melihat bahwa Odoo menggunakan port 8069 yang belum dilengkapi dengan SSL. Untuk itu kita memerlukan instalasi SSL agar Odoo ERP kita aman. Kita akan menggunakan SSL dari Let’s Encrypt untuk mengamankan lalu lintas data.

Instalasi Lets Encrypt pada Odoo ERP adalah

1. Instalasi Nginx

   1	#apt install nginx

2. Stop Nginx

   1	systemctl stop nginx

3. Instalasi Cerbot

   1	apt install certbot

4. Pembuatan sertifikat SSL (dan juga untuk renew)

   1	certbot certonly --standalone -d proweb.domainku.id --preferred-challenges http --agree-tos -n -m aris@emalku.co.id --keep-until-expiring

5. Contoh hasil

   1 2 3 4 5 6 7 8 9

   IMPORTANT NOTES: - Congratulations! Your certificate and chain have been saved at: /etc/letsencrypt/live/proweb.domainku.id/fullchain.pem Your key file has been saved at: /etc/letsencrypt/live/proweb.domainku.id/privkey.pem Your cert will expire on 2022-01-06. To obtain a new or tweaked version of this certificate in the future, simply run certbot again. To non-interactively renew *all* of your certificates, run "certbot renew"

6. Contoh /etc/nginx/sites-enabled/odoo.conf

   1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52

   #odoo server upstream odoo { server 127.0.0.1:8069; } upstream odoochat { server 127.0.0.1:8072; }   # http -> https server { listen 80; server_name proweb.domainku.id; rewrite ^(.*) https://$host$1 permanent; }   server { listen 443; server_name proweb.domainku.id; proxy_read_timeout 720s; proxy_connect_timeout 720s; proxy_send_timeout 720s;   # Add Headers for odoo proxy mode proxy_set_header X-Forwarded-Host $host; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header X-Real-IP $remote_addr;   # SSL parameters ssl on; ssl_certificate /etc/letsencrypt/live/proweb.domainku.id/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/proweb.domainku.id/privkey.pem;   # log access_log /var/log/nginx/odoo.access.log; error_log /var/log/nginx/odoo.error.log;   # Redirect longpoll requests to odoo longpolling port location /longpolling { proxy_pass http://odoochat; }   # Redirect requests to odoo backend server location / { proxy_redirect off; proxy_pass http://odoo; }   # common gzip gzip_types text/css text/scss text/plain text/xml application/xml application/json application/javascript; gzip on; }

7. Tambahkan proxy_mode = True pada /etc/odoo/odoo.conf
   Jika menggunakan Docker Container tidak perlu menambahkan proxy_mode
   
8. Restart Odoo

   1	#systemctl restart odoo

   Jika menggunakan container tidak perlu restart

9. Start Nginx

   1	#systemctl start nginx

10. Silahkan masuk ke https Odoo anda
    

Informasi lebih lanjut silahkan mengunjungi
1. https://computingforgeeks.com/install-odoo-ubuntu-focal-with-lets-encrypt-ssl/ .
2. https://www.odoo.com/documentation/14.0/administration/install/deploy.html .
3. https://www.odoo.com/documentation/14.0/administration/install/install.html .
4. https://docs.docker.com/engine/reference/commandline/exec/ .
5. https://stackoverflow.com/questions/28721699/root-password-inside-a-docker-container .
6. https://phase2.github.io/devtools/common-tasks/ssh-into-a-container/ .

Kunjungi www.proweb.co.id untuk menambah wawasan anda.

Jika anda tertarik mengenai aplikasi Odoo ERP silahkan mengisi form di bawah ini