TLS Certificate Support

Gruxi supports TLS (Transport Layer Security) to encrypt data transmitted between the server and clients. This ensures that sensitive information, such as login credentials and personal data, is protected from eavesdropping and tampering.

Certificates can be easily configured for each site, allowing you to enable HTTPS for secure communication.

There are a few ways to set up TLS certificates for your sites in Gruxi:

• Upload your own certificates (PEM format) as text directly in the site configuration.
• Specify the path to existing certificate files on the server.
• Use Let’s Encrypt integration for automatic certificate issuance and renewal.

Self-signed certificates as default

Gruxi can generate self-signed certificates automatically if no valid certificates are found for a site. These are suitable for testing and development but should be replaced with certificates from a trusted Certificate Authority (CA) for production use.

TLS with Let’s Encrypt

Gruxi integrates directly with Let’s Encrypt for automatic certificate issuance and renewal. This makes it easy to set up and maintain secure HTTPS connections for your sites without manual intervention.

To set it up, make sure to complete these steps:

• Ensure your site is publicly accessible over HTTPS (port 443) for domain validation.
• Configure the site in Gruxi with the correct domain name.
• Enable "Enable Automatic TLS Certificates" in the site configuration.
• In "Core Settings" > "TLS Settings": set "LetsEncrypt Account Email" to the email you want to use for notifications and account recovery.
• Save the configuration, then reload the configuration (or restart Gruxi).
• Give Gruxi a moment to complete certificate issuance in the background.

Automatic issuance and renewal of TLS Certificates

Gruxi handles the automatic issuance and renewal of TLS certificates through its integration with Let’s Encrypt, ensuring your sites remain secure without manual intervention and without any external dependencies.