Back
App Hosting

Enable SSL/HTTPS

Serve your Victus-hosted app over HTTPS: the quick Cloudflare route, or a free Let's Encrypt certificate issued with Certbot for an Nginx site.

sslhttpstlscertificatelets encryptcertbotcloudflare

HTTPS encrypts traffic between your visitors and your app and is expected by browsers, logins and payment flows. There are two common ways to get it on a Victus-hosted app: let Cloudflare terminate SSL in front of your server (fastest), or issue a free Let's Encrypt certificate on the server itself with Certbot. Both require your domain to already point at the server — see "Point a custom domain/subdomain".

Option A — Cloudflare (no server config)

  1. 1Add your domain to Cloudflare and update your nameservers to Cloudflare's.
  2. 2Create the A/CNAME record for your app and keep the proxy ON (orange cloud).
  3. 3In SSL/TLS settings choose Full (or Full (strict) if you also have a valid cert on the origin).
  4. 4Enable Always Use HTTPS so visitors are redirected from http to https automatically.

Why Cloudflare is easiest here

Cloudflare issues and renews the public certificate for you and can front a non-standard app port, so visitors get https on 443 with zero certificate work on your server.

Option B — Let's Encrypt with Certbot (Nginx)

If you have shell/terminal access to the server (for example an Nginx App Hosting server or a Victus VPS running your reverse proxy) and your domain resolves to it on ports 80/443, Certbot can obtain and auto-renew a free certificate.

bash
# Debian/Ubuntu-based server
sudo apt update && sudo apt install -y certbot python3-certbot-nginx

# Issue + install a cert and auto-edit the Nginx config
sudo certbot --nginx -d app.yourdomain.com

# Test the automatic renewal
sudo certbot renew --dry-run

Ports 80 and 443 must reach the server

Let's Encrypt validates over HTTP on port 80 and serves HTTPS on 443. If your app only listens on a custom port, you need Nginx bound to 80/443 in front of it for Certbot to work.

Force HTTPS and verify

  • Redirect all http traffic to https (Certbot can add this automatically; Cloudflare has "Always Use HTTPS").
  • Load https://app.yourdomain.com and check for the padlock and a valid certificate.
  • If you use both Cloudflare proxy and an origin cert, set Cloudflare SSL mode to Full (strict) to encrypt the whole path.

Certificate errors after setup?

A mismatch name means the cert was issued for a different hostname; a "not secure" warning behind Cloudflare usually means the SSL mode is set to Off/Flexible while the origin expects HTTPS. Confirm DNS resolves to the correct IP and that the SSL mode matches your origin setup.

Related in App Hosting

Deploy Code-Server (browser VS Code)Spin up Code-Server on Victus App Hosting to get a full Visual Studio Code editor and integrated terminal in your browser, then reach it over your allocated port or a custom domain.Host a static or PHP site with NginxServe an HTML/CSS/JS static site or a PHP application from a Victus App Hosting server: upload your files, point Nginx at them and reach the site on your allocated port.Install WordPressSet up a WordPress site on Victus App Hosting: create the server, create a MySQL database, run the famous five-minute install and finish the initial configuration.Create a databaseCreate a MySQL/MariaDB database for your Victus App Hosting or game server from the panel Databases tab, and understand the host, port, name, user and password it hands you.Connect to your databaseUse the host, port, name, user and password from the Victus panel Databases tab to connect from PHP, Node.js, Python or an external MySQL client.Set environment variablesConfigure app settings and secrets on a Victus App Hosting server using Startup variables in the panel, plus how to read them from your code and when a restart is needed.Point a custom domain/subdomainAttach your own domain or subdomain to a Victus App Hosting server by creating the right DNS records that point at the server IP and port shown in the panel.