PasswordLab Domain Name and SSL Certificate Setup Guide

Securing your PasswordLab server with a custom domain and a valid SSL certificate is essential for protecting user data and ensuring a professional, trusted experience. This guide provides step-by-step instructions for configuring your domain and automatically installing a free SSL certificate from Let's Encrypt.

Prerequisites

• Root access to your PasswordLab server (via SSH)

• Administrator account for the PasswordLab web app

• A registered domain name (e.g., passwords.yourcompany.com) with ability to create or modify DNS records at your domain registrar

Step 1: Prepare Your Domain Name

1. Choose a subdomain (e.g., vault.yourcompany.com) to use for your PasswordLab server.

2. Log in to your domain registrar's DNS management panel.

3. Create an A record for your chosen subdomain:

   • Host/Name: The subdomain (e.g., vault)

   • Type: A

   • Value: The public IP address of your PasswordLab server

   • TTL: Default or 5 minutes (for faster propagation)

4. Wait for DNS propagation:

   • DNS changes can take a few minutes to several hours to propagate globally.

   • You can check propagation using tools like whatsmydns.net.

Step 2: Configure Domain in PasswordLab Web App

1. Log in to the PasswordLab web app as an administrator.

2. Navigate to the Settings menu.

3. Go to the App Config section.

4. Enter your chosen subdomain (e.g., vault.yourcompany.com) in the domain field.

5. Save the configuration.

6. Check for confirmation:

   • If DNS is not yet propagated, you may see an error. Wait and try again.

   • If DNS is correct, you will see a success message.

Step 3: Restart PasswordLab Service to Apply Changes

1. SSH into your server as root:

   ssh root@your-server-ip

2. Restart the PasswordLab service:

   systemctl restart passwordlab

3. Check service status:

   systemctl status passwordlab

   • The service should show as "active (running)" in green.

Step 4: Automatic SSL Certificate Installation

• When you restart the PasswordLab service after setting the domain, the system will automatically:

  • Request a free SSL certificate from Let's Encrypt

  • Install and configure the certificate for your domain

  • Redirect all HTTP traffic to HTTPS for secure access

• No manual certificate installation is required.

Step 5: Verify SSL and Secure Access

1. Open your domain in a web browser:

   • Go to https://your-chosen-domain.com

2. Check for a secure connection:

   • Look for the padlock icon in the address bar

   • Click the padlock to view certificate details (should show Let's Encrypt as the issuer)

Troubleshooting

• DNS Not Propagated:

  • Wait for DNS changes to take effect

  • Double-check your A record and IP address

• SSL Certificate Not Issued:

  • Ensure your domain is correctly pointed to your server

  • Check that port 80 (HTTP) and 443 (HTTPS) are open in your firewall

  • Review service logs:

    journalctl -u passwordlab -f

• Service Not Starting:

  • Check for typos in the domain name

  • Ensure your server's time and date are correct (required for SSL)

By following this guide, you will have a secure, professional PasswordLab deployment accessible via your custom domain and protected by a valid SSL certificate from Let's Encrypt.