Pimatic SSL / Apache2 / Multi WebGUIs

---

@tehmilcho just remove “cors” from your config.json. Then this error is gone. More info here: https://forum.pimatic.org/topic/2081/missing-property-allowedorigin

If you using apache with ssl you also need to add the ssl certificates to apache config.
Is there a reason why how using apache2 instead of nginx for reverse proxy?

I`m using nginx with this config: https://forum.pimatic.org/topic/1199/pimatic-through-reverse-proxy/5
Maybe give it a try

In your config.json for pimatic you have

“httpsServer”: {
“enabled”: true,
“port”: 443,
“hostname”: “”,
“keyFile”: “ca/pimatic-ssl/private/privkey.pem”,
“certFile”: “ca/pimatic-ssl/public/cert.pem”,
“rootCertFile”: “ca/certs/cacert.crt”
},

If you use 1338 then why do you specify 443 as port?
And the other way round: If your pimatic is the only SSL based webserver, do not use 1338 but stay with 443.

And finally in your virtualhost *:443:

    ProxyPass / https://localhost:1338
    ProxyPassReverse / https://localhost:1338

specifiying https is better than not specifying it.
(and as before: do not use the 1338 or specify 1338 as well in your config.json)

@Harry-van-der-Wolf

Hi thanks for reply. At the monent the main problem is after i added the code for SSL in the Pimatic config, pimatic is not start anymore (see my 2nd Post)

i set the port to 1338 because the Apache is catches already 443 so i tested with a other port. My goal is to get pimatic to work with SSL, than i will check out the “Subsonic SSL” and than a Webmin with ssl and i want only open 443 in my router so i need the Apache.

@thost96

Thx the “cors” message can i fix with this, its a littlebit funny because i read its stuff from a old-version but i installed the fristtime pimatic for 10 Days ago.

I never worked with nginx but apache know it a littlebit from my education.

Have do you a tipp for the other error that i get after adding the SSL to my pimatic config?

I have the exact same config like you in my config.json with same folder names and file names and it functions fine. So with regard to the certificates

“keyFile”: “ca/pimatic-ssl/private/privkey.pem”,
“certFile”: “ca/pimatic-ssl/public/cert.pem”,
“rootCertFile”: “ca/certs/cacert.crt”

Did you place those certificates indeed the folder ca (+ subfolders) in your pimatic-app folder?

@Harry-van-der-Wolf

i do it with this Guide https://pimatic.org/guide/getting-started/remote-ssl/

the files are there, but empty if a open them with nano… is this right?

No that is definitely not correct.
Depending on the encryption bit level (256 bits, 512, …, 2048 bits) you will have a file of at least 800 bits to 2000+ bits for the “. pem” files.

It should contain something like

-----BEGIN CERTIFICATE-----
MIIDaDCCAlACAQIwDQYJKoZIhvcNAQENBQAwdTELMAkGA1UEBhMCTkwxFDASBgNV
<  ... many more lines ..>
vbCZ6GDy7vQxZSrC
-----END CERTIFICATE-----

(this was the public certificate)

Should i delete the folder “CA” and do it again like the Guide?

Yes, I think so. I did not experience this myself so I’m not sure.
I would rename the folder instead of delete it, but that is up to you.

okay … now the files are not empty and no Error in the “pimatic-deamon.log”, and works with “localhost + SSL Port” … Thx a lot… i have to check out how it works with a Reverse Proxy