diff --git a/website/docs/panel/domains/ssl.md b/website/docs/panel/domains/ssl.md new file mode 100644 index 00000000..afd690bd --- /dev/null +++ b/website/docs/panel/domains/ssl.md @@ -0,0 +1,59 @@ +--- +sidebar_position: 5 +--- + +# SSL + +OpenPanel automatically generates and renews SSL certificates for all domains using **Let's Encrypt** or **ZeroSSL**. + +You can also configure a **custom SSL certificate** for any domain via **OpenPanel > Domains > SSL**. + +--- + +## Custom SSL + +To use your own SSL certificate: + +1. Upload your certificate files via **OpenPanel > FileManager**. +2. Go to **OpenPanel > Domains**, then click **SSL** next to the domain. +3. Under **Configure custom SSL**, enter the file paths for: + * Certificate file (`.crt`) + * Private key file (`.key`) +4. Click **Configure**. + +Once configured, your custom certificate details will appear on the same page. + +![screenshot of domain with custom ssl](/img/panel/v2/openpanel_customssl.png) + + +## AutoSSL + +**AutoSSL** is the default option in OpenPanel. +If you're adding a new domain, no action is required. + +To switch **from a custom certificate back to AutoSSL**: + +1. Navigate to **OpenPanel > Domains** and click **SSL** for the domain. +2. Click **Switch back to AutoSSL**. + +The certificate will be re-issued automatically after the domain is accessed via `https://`. Once generated, it will be displayed on the same page. + +![screenshot of domain with autossl](/img/panel/v2/openpanel_autossl.png) + + +### Requirements + +To ensure successful SSL generation: + +* The **A record** for the domain must point to the server's **IPv4 address**. +* The DNS must be **fully propagated**. Use tools like [whatsmydns.net](https://www.whatsmydns.net/#A) to check. +* The domain must be accessed via `https://` at least once to trigger certificate generation. Open the domain in a browser using `https`. +If: + +* The domain was just added, +* DNS is not yet pointed to the server, or +* The domain has not been accessed over `https://`, + +Then the SSL section will show **“No certificate found.”** + +![screenshot of domain with autossl but no ssl yet](/img/panel/v2/openpanel_autossl_no_ssl.png)