Looking for tutorial on deploying 3cx Debian with Let's encrypt on

[Mocabi]

Hi Guys,

Having my 3cx perpetual license expired soon. We decided to move out and stay with this 16 version.

We are planning to implement the let's encrypt SSL to our 3cx copies (installed from 3CX Debian ISO, not SBC)
we do own our FQDN domain name which can be pointed and a fixed IP at our office then NAT port 80 to a 3cx server host behind a firewall.

From my research, it seems I have to carry out below instructions.

1. Perform full configuration backup
2. Unlink the FQDN from dashboard
3. Make sure the port 80 will be NAT to 3CX debian server.
4. Install Certbot at debian (according to let's encrypt instructions)
5. Reinstall 3CX and enter a new FQDN and restore the backup configuration.

I was trying to consult the 3cx partner months ago. It seems there was no luck getting anything from them as all they prefer is to have us renew MA. I can understand that they only familiar with 3CX solutions. No hard feelings.

So, at this point, can anyone point out if there is any threads / instructions or a tutorial that I can follow to implement the system?

Cheers,

 

[cobaltit]

I'm not sure what you value your time at, but I imagine 3CX maintenance has to be close to the same price. But if you still decide to go down this road this document more or less covers the SSL portion. There's a lot of guides on certbot which isn't 3CX specific.

https://www.3cx.com/docs/fqdn-ssl-certificate-v15/

 

[Mocabi]

Thanks a lot for a prompt response. Yes I agree the MA would be best.

However, we had a critical issue where the android apps will not show any receiving calls, (This is before v16 released and solved most of the issues)

At that time, we didn't get any good support and our reseller said the issues is only happening with our company. That's why the boss was not so happy and asked to move out to other system.

We then planned to keep this system as a backup solution just in case.

And this is the point where I am being assigned to try out the SSL and FQDN setup.

I have read the document in the given link. But still struggling on the SSL for the let's encrypt part. Anyway, I will try to do more research.

I wouldn't mind renewing the MA with other reseller for another year if anyone can help me setup all above requests. Do you know where I should post for such a request?