Jatos with Apache, how to make the server secure
Hi!
I'm currently running Jatos with our public IP, but this connection is insecure. We need a safe connection to run our experiment that records voice responses from the users.
Right now I installed Apache and got the ssl certificate with Certbot. If I run only Apache with the config file provided in the documentation (https://www.jatos.org/JATOS-with-Apache.html (with our domain name)) we access our domain with secure connection. However, when I stop Apache and then run the loader.sh, we can access the domain but with insecure connection.
Why does this happen and how can I get a safe connection server with Jatos?
Comments
If you want to use JATOS with Apache you should configure Apache to use encryption and your domain. JATOS usually runs on localhost and port 9000. Apache just forwards all traffic to JATOS. Don't configure JATOS to use your public IP or certificate. This goes into Apache.
Hi Kri!
Thanks so much for the reply. I edited the production.conf file so when I run Jatos it shows "To use JATOS type localhost:9000 in your browser's address bar". Then I run apache with the command "sudo service apache2 start" and went to our domain page. It redirects correctly to the https page, but it displays the default html of apache2, not the jatos page. Am I doing something wrong?
Can you post your apache.conf?
Sure! Here it is:
Also, we checked from the computer server and Jatos is running well in localhost:9000. We still cannot access it from the domain. Here is the domain.conf just in case:
Hi Kri.
I just wanted to let you know that we managed to fix the error! We had to reinstall jatos in the /var/www/our_server/ directory (not sure if that was necessary, but it worked) and put all the apache configurations regarding port 443 in the le-ssl.conf file. Now we can access the jatos server with secure connection.
Thanks so much for your time! I hope this discussion helps anybody if they have the same issue in the future.
Great you solved it! I'm not an Apache expert. I never used Let's Encrypt with Apache. Maybe you are correct and this is the way to go.