Undo postSetupHTTPS

Technical Support
1

Note - If you do not fill in every section below, your post won’t be answered - you must provide the steps you have followed so far and the actions you’ve already taken. Make sure to remove this notice from your post too.

Make sure you search before posting! Duplicate posts for the same issue may not be answered.

OS Name/Version: Debian GNU/Linux 12 (bookworm)

Product Name/Version: AMP 2.6.0.0

Problem Description: I tried to use the getamp postSetupHTTPS command but it ended up failing at the certbot stage. I no longer want to use HTTPS but now when I go to SERVER_IP:8080 on a machine on the same network I get nothing rather than the AMP control panel that I’m used to seeing.

Steps to reproduce:

  • Step 1 run getamp postSetupHTTPS
  • Step 2 Follow prompts until it fails

Actions taken to resolve so far: Run apt-get purge nginx nginx-common and ampinstmgr reconfigure ADS01 +Core.Webserver.UsingReverseProxy False

2

You’ll have to reopen port 8080 in the firewall

3

Hey, thanks for your reply!

Could I ask how I would do that? I’m a bit of a linux newbie and learning as I go.

4

You could try running ampinstmgr updatefirewall as root to see if AMP will re-add it for you now that you’ve changed the reverse proxy configuration.
Otherwise you’ll have to use your Debian install’s firewall command (can’t remember it off the top of my head, I haven’t worked with IPTables all that much)

5

Unfortunately ampinstmgr updatefirewall reopened a bunch of ports but 8080 was not amongst them

I tried both the iptables and ufw methods given here: Different methods to open port 8080 in Debian

But for the iptables method when I run service iptables save I get iptables: unrecognized service

And for the ufw method I run ufw status and get Status: inactive

6

To my understanding, some newer installs use nftables instead of iptables

7

From what I can tell, port 8080 is open. Running ss -lntu shows tcp LISTEN 0 512 127.0.0.1:8080 0.0.0.0:*

But I still can’t see the AMP control panel when I go to SERVER_IP:8080

8

Try running ampinstmgr rebind ADS01 then put it’s IP as 0.0.0.0 and it’s port as 8080

9

Still no luck. However it says You should now run 'ampinstmgr repairauth' on this system as well as any other AMP targets. after the rebind but when I run that command it asks me Which mode is ADS configured as? 'standalone', 'controller', 'target' or 'hybrid'? If you do not know, press CTRL+C to abort and I do not know haha

10

If you don’t know any of the modes and you just got the one AMP install, it’s safe to assume you’re running standalone

11

Okay, so I enter standalone and it then asks me What is the URL of your controller/standalone instance? This URL must be accessible from all targets in a multi-target setup.

12

That would be the same URL as your web interface, in this case you can have it as http://127.0.0.1:8080 (since all of the instances are local)

13

Perfect, got it working again! Thanks for all your help, really appreciate it!

14

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.