Tutorial tutorial: how to use ssl on the panel

[urgodfather]

Here's what I did to make SSL work both for playback and admin area.
I can confirm it is working on MAG520. Connect your MAG device to portal on https://EXAMPLE.COM:25463/c

You also need to update your xtream-ui databese with the following line:

UPDATE xtream_iptvpro.settings SET use_https='["1", "2", "3"]' WHERE id='1';

Modify nginx.conf as follows for SSL playback after installing letsencrypt certificate:

/home/xtreamcodes/iptv_xtream_codes/nginx/conf# nano nginx.conf

server {
listen 25461;listen 25463 ssl;
ssl_certificate /etc/letsencrypt/live/EXAMPLE.COM/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/EXAMPLE.COM/privkey.pem;
ssl_protocols SSLv3 TLSv1.1 TLSv1.2;
index index.php index.html index.htm;
root /home/xtreamcodes/iptv_xtream_codes/wwwdir/;
server_name EXAMPLE.COM;
server_tokens off;
chunked_transfer_encoding off;


Scroll somewhat lower, and modify "server" as follows for admin area SSL

server {
listen 25500;listen 443 ssl;
ssl_certificate /etc/letsencrypt/live/EXAMPLE.COMu/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/EXAMPLE.COM/privkey.pem;
index index.php index.html index.htm;
root /home/xtreamcodes/iptv_xtream_codes/admin/;
server_name EXAMPLE.COM;

include /etc/letsencrypt/options-ssl-nginx.conf;

if ($scheme != "https") {
return 301 https://$host$request_uri;
}

Hit a Like if it helps you

Someone figured it out! Good job!

Don’t ask for likes though. If you want them as a requirement, then hide some of the context in the thanks BBcode. We have a tutorial on how to do that. Fix the code sections while you are at it. You have an edit button to make your corrections.

 

[LurgogR]

Hello I thank you for the Tutorial I would like to know if it would be possible to make so that the post is a little cleaner because with certain comment it is more what we must do and if possible to add the part of configuration of cloudflare thanks

 

[code64]

Thank's for this post but smarters for windows and mac os don't work with ssl m3u link i face big issue with smarters for windows is their any alternative to use ssl with other windows apps exept vlc

Thank you

 

[urgodfather]

Thank's for this post but smarters for windows and mac os don't work with ssl m3u link i face big issue with smarters for windows is their any alternative to use ssl with other windows apps exept vlc

Thank you

that has nothing to do with these instructions. your issue is a smarters issue. also, there is no purpose to have windows or mac os application. bluestacks or memu or some other android emulator OR set up webplayer. clients can also visit your domain just like how to pull m3u and use built in player.

To view the content, you need to Sign In or Register.

 

[code64]

that has nothing to do with these instructions. your issue is a smarters issue. also, there is no purpose to have windows or mac os application. bluestacks or memu or some other android emulator OR set up webplayer. clients can also visit your domain just like how to pull m3u and use built in player.
No quote

Thank you @urgodfather that's will i do or return to http mode with your experience is it better to use https or http with xtream ui or xtream code in general ?

Great thank's in advance .

 

[SubZer0]

URGODFATHER is actually a GOD. We are not worthy!! He has been a major help and truly a blessing.

 

[go13]

Someone figured it out! Good job!

Don’t ask for likes though. If you want them as a requirement, then hide some of the context in the thanks BBcode. We have a tutorial on how to do that. Fix the code sections while you are at it. You have an edit button to make your corrections.

how can we use the domain name on the main as well as the lb? to be able to read everything in https? someone have a tutorial please?

 

[mangosa]

I did everything according to the instructions, I got the picture in m3u,
but I don't know where I'm wrong, I can't log in to https, it still goes with http ??

server {
listen 25500;listen 443 ssl;
ssl_certificate /etc/letsencrypt/live/EXAMPLE.COMu/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/EXAMPLE.COM/privkey.pem;
index index.php index.html index.htm;
root /home/xtreamcodes/iptv_xtream_codes/admin/;
server_name EXAMPLE.COM;

include /etc/letsencrypt/options-ssl-nginx.conf;

if ($scheme != "https") {
return 301 https://$host$request_uri;
}

 

[peezy]

Had fun setting this up..not sure where the credit actually belongs but franks ?

 

[thugthug]

thanks i love that.
for redirections on nginx please add this line into nginx config :

# HTTP to HTTPS redirections
location / {
proxy_pass http://server;
return 301 https://$host$request_uri;
}

I'm a layman on the subject, what would be the difference between your redirect method and that of the "mangosa"?

include /etc/letsencrypt/options-ssl-nginx.conf;

if ($scheme != "https") {
return 301 https://$host$request_uri;
}

 

[thugthug]

Okay, after a long time I managed to make my servers all accept and run SSL, I got a B rating, not bad.

However, when I go into settings and enable "Main or Loadbalance Https" for all my servers that I installed SSL on, they simply don't reproduce anything.

When I disable it, and still make connections via https, it works perfectly.

Does anyone have an idea?

 

[thugthug]

My own update:

I discovered that when adding some server in "Main or Loadbalance Https", it kind of tries to do an https broadcast of the channels located on that server.

In this case, the channels I have don't accept ssl and that's why it doesn't play after being added the server in the option "Main or Loadbalance Https".

But my intention was that, it came to my server without ssl and from there, the server took it to the client with ssl, but I still can't find a line of reasoning for that to happen.

 

[juliozapata]

All credit to @emre1393 for this tutorial and packages. I just copied it here.


thanks to @urgodfather for his nginx config file, i edited a bit and add small things.

-point your domain to your server

-install lets encrypt certbot

sudo apt-get update
sudo apt-get install software-properties-common
sudo add-apt-repository universe
sudo add-apt-repository ppa:certbot/certbot
sudo apt-get update
sudo apt-get install certbot python-certbot-nginx

-generate your ssl certificate with lets encrypt certbot,

sudo certbot certonly -d yourdomain.com --nginx

- Congratulations! Your certificate and chain (ssl cert bundle) have been saved at:
/etc/letsencrypt/live/yourdomain.com/fullchain.pem
Your key file has been saved at:
/etc/letsencrypt/live/yourdomain.com/privkey.pem
(not: you have to renew lets encrypt certificates in every 90 days, use this command
sudo certbot renew

i compiled nginx with latest version, openssl 1.1.1d and http2 support, i didn't test %100 but it is working fine. i am using this build currently.
nginx_updated.zip(5.02 MiB) Downloaded 165 times
backup your original file as nginx.bak and put this nginx file into /home/xtreamcodes/iptv_xtream_codes/nginx/sbin folder.
set 755 permission and xtreamcodes ownership for new nginx file.
edit: you may need to run start_services.sh after replacing nginx binary.
sudo /home/xtreamcodes/iptv_xtream_codes/start_services.sh

cp /home/xtreamcodes/iptv_xtream_codes/nginx/conf/nginx.conf  /home/xtreamcodes/iptv_xtream_codes/nginx/conf/nginx.conf.bak

use this config file as templete,
nginx.conf.ssl_for_xtreamui.txt.zip(2 KiB) Downloaded 157 times

open conf file, replace ports, domain names, ssl cert file names and paths, read the # notes
and save it as;

/home/xtreamcodes/iptv_xtream_codes/nginx/conf/nginx.conf

set 755 permission and xtreamcodes ownership for new nginx.conf file.

test your conf file with;

sudo /home/xtreamcodes/iptv_xtream_codes/nginx/sbin/nginx -t

if it says successful, reload the nginx,
if it says test failed, look at the error message and fix your config and test again.

then reload the nginx;

sudo /home/xtreamcodes/iptv_xtream_codes/nginx/sbin/nginx -s reload

also check listening ports to make sure it is working;

sudo lsof -i -P -n | grep LISTEN

backup your nginx.conf

thank you very much

 

[redhat]

thank you very much

CAN YOU READ !!!???

 

[Duda2021]

good friends someone has the link of this file so I can configure my panel or can help me configure my xtream panel with ssl to avoid isp nginx_updated.zip

 

[mihaiantonescu93]

I can't add https link m3u8

I don't know if I did all the steps correctly, the added domain does not connect to the xtream ui panel

the download link in the post above does not work

 

[jibran84pk]

BRAVO MAN BRAVO
I tried this method in 2024, on UBUNTU 20
just little bit changes were needed

sudo apt-get update`
`sudo apt-get install certbot python-certbot-nginx`

INSTEAD
sudo apt-get update`
`sudo apt-get install certbot python3-certbot-nginx`

Remaining same procedure