Unable to implement SSL for Pi-hole Admin Web-Interface.
Here, I followed guidelines from the documentation.
here is copy of my external.conf file from /etc/lighttpd/ directory.
Debug Token: https://tricorder.pi-hole.net/120iafeuzt
[root@PiHole lighttpd]# cat external.conf
$HTTP["host"] == "PiHole.homelabusa.com" {
# Ensure the Pi-hole Block Page knows that this is not a blocked domain
setenv.add-environment = ("fqdn" => "true")
# Enable the SSL engine with a LE cert, only for this specific host
$SERVER["socket"] == ":443" {
ssl.engine = "enable"
ssl.pemfile = "/etc/lighttpd/ssl/combined.pem"
ssl.ca-file = "/etc/lighttpd/ssl/chain.pem"
ssl.honor-cipher-order = "enable"
ssl.cipher-list = "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH"
ssl.use-sslv2 = "disable"
ssl.use-sslv3 = "disable"
}
# Redirect HTTP to HTTPS
$HTTP["scheme"] == "http" {
$HTTP["host"] =~ ".*" {
url.redirect = (".*" => "https://%0$0")
}
}
}