Univention App-Settings

Note

The App-Settings part is only valid starting with App version 3.1.0-7.

Within the managment interface of Univention, you can change some access related settings:

  • FQDN of Zammad (Domain you can access it from)

  • Another Port

  • Other certificates beside the Univention certificate

Note

Some settings require you to have a combination of the above settings. If the combination of settings is not met, the update script will automatically revert these changes.

This ensures that your Univention Host stays operational. Please do not try to trick the scripts, it might cause outages.

If you’re using the default settings, we’ll empty the values of the text fields to reduce confusion. This is not a Bug, but a “Feature”.

Using another FQDN

This consists of two settings: a selection and a text field. The default setting of the App is Default UCS-Hostname which will use the FQDN of the Univention-Host (and it’s SSL-Certificate).

Note

In order to use custom hostnames, please also ensure to use a custom certificate.

If you set Custom Hostname, you’ll need to enter a hostname in the text field below. Ensure that your Univention host can resolve the hostname (and it’s pointing to the host in question!).

Note

We won’t create any DNS entries or certificates during this process.

Using another Port

Currently you can choose between Default Highport and Port 8443. By default, we’ll use Port 10412 for Zammad, if you decide for Port 8443, we’ll handle the firewall steps needed and adjust the vHosts-Port.

Warning

Please ensure that if you choose another Port, that it’s not used already! We do not verify this!

Note

Please note that for technical reasons (how Univention and Zammad work) it’s not possible to use Zammad on Port 443 or within a subdirectory.

Using other certificates

By default we’re using the Univention-Host certificate (Univention (default)). In some cases (and especially if you’re using custom hostnames) this might be troublesome.

Note

You can use custom certificates without changing the hostname.

Warning

We’re not verifying if the certificates are valid in any way (e.g. still valid in time and if the hostname is inside). This step might follow, but please be aware that this might lead to certificate issues.

If you choose Let's Encrypt, please ensure that you already have installed the Let's Encrypt App (by Univention GmbH) and also already aquired a certificate via it. If you’re applying the settings, we’ll check for the following two files::

/etc/univention/letsencrypt/signed_chain.crt
/etc/univention/letsencrypt/domain.key

If we can’t find these, we’ll revert to the default Univention certificate.

You can also choose to use your very own certificate by selecting Custom Certificate. For this it’s important to know, that we expect the certificate to be within a specific location (/etc/univention/ssl/). Within the two text fields, you’ll need to provide the filenames of your certificate and your certificate-key.

These certificates can be kept in a subfolder. If we cannot find either of the two files, we reset the setting to the default Univention certificate.