proxmox/docs/04-configuration/NGINX_SSL_MANUAL_CONFIGURATION_CHECKLIST.md

# Nginx SSL Manual Configuration Checklist

> Historical note:
> This checklist was written during the earlier NPM/RPC SSL migration and still contains pre-cutover endpoint references. Keep for operator history; do not treat it as the current routing checklist.

**Last Updated:** 2026-01-31  
**Document Version:** 1.0  
**Status:** Active Documentation

---

**Date**: 2026-01-09  
**NPM URL**: `http://192.168.11.26:81`  
**Credentials**: `nsatoshi2007@hotmail.com` / `L@ker$2010`

---

## Quick Start

1. **Access NPM**: Open `http://192.168.11.26:81`
2. **Log in**: `nsatoshi2007@hotmail.com` / `L@ker$2010`
3. **Configure each domain** using the checklist below

---

## Configuration Checklist

For each domain, check off when complete:

### sankofa.nexus Zone

- [ ] `sankofa.nexus` → `http://192.168.11.140:80`
- [ ] `www.sankofa.nexus` → `http://192.168.11.140:80`
- [ ] `phoenix.sankofa.nexus` → `http://192.168.11.140:80`
- [ ] `www.phoenix.sankofa.nexus` → `http://192.168.11.140:80`
- [ ] `the-order.sankofa.nexus` → `http://192.168.11.140:80`

### d-bis.org Zone

- [ ] `explorer.d-bis.org` → `http://192.168.11.140:80`
- [ ] `rpc-http-pub.d-bis.org` → `https://192.168.11.252:443` (WebSocket ✅)
- [ ] `rpc-ws-pub.d-bis.org` → `https://192.168.11.252:443` (WebSocket ✅)
- [ ] `rpc-http-prv.d-bis.org` → `https://192.168.11.251:443` (WebSocket ✅)
- [ ] `rpc-ws-prv.d-bis.org` → `https://192.168.11.251:443` (WebSocket ✅)
- [ ] `dbis-admin.d-bis.org` → `http://192.168.11.130:80`
- [ ] `dbis-api.d-bis.org` → `http://192.168.11.155:3000`
- [ ] `dbis-api-2.d-bis.org` → `http://192.168.11.156:3000`
- [ ] `secure.d-bis.org` → `http://192.168.11.130:80`

### mim4u.org Zone

- [ ] `mim4u.org` → `http://192.168.11.19:80`
- [ ] `www.mim4u.org` → `http://192.168.11.19:80`
- [ ] `secure.mim4u.org` → `http://192.168.11.19:80`
- [ ] `training.mim4u.org` → `http://192.168.11.19:80`

### defi-oracle.io Zone

- [ ] `rpc.public-0138.defi-oracle.io` → `https://192.168.11.252:443` (WebSocket ✅)

**Total: 19 domains**

---

## Per-Domain Configuration Steps

For each domain:

1. **Click**: Proxy Hosts → Add Proxy Host

2. **Details Tab**:
   - Domain Names: `[domain]`
   - Scheme: `http` or `https` (based on target)
   - Forward Hostname/IP: `[target IP]`
   - Forward Port: `[target port]`
   - Block Common Exploits: ✅
   - Websockets Support: ✅ (for RPC domains)

3. **SSL Tab**:
   - Request a new SSL Certificate
   - Email: `nsatoshi2007@hotmail.com`
   - I Agree to Terms: ✅
   - Force SSL: ✅
   - HTTP/2 Support: ✅
   - HSTS Enabled: ✅

4. **Save**

---

## Verification

After configuring all domains:

```bash
bash scripts/nginx-proxy-manager/verify-ssl-config.sh
```

---

**Last Updated**: 2026-01-09