Webmin<\/strong>. This will set up Webmin in minutes!<\/p><\/blockquote>\nStep 3: Adding a Let\u2019s Encrypt SSL Certificate to Webmin<\/h2>\n
Webmin manages sensitive components on your Rocky Linux server, and it is important to secure it using HTTPS. To do this, follow these steps and set up a Let\u2019s Encrypt SSL certificate.<\/p>\n
Install Certbot<\/h3>\n
First you\u2019ll need to install the Certbot Let's Encrypt client application, which manages certificate requests.<\/p>\n
If you haven\u2019t already, enable the EPEL repository:<\/p>\n
sudo dnf install epel-release -y<\/code><\/pre>\nThen install certbot:<\/p>\n
sudo dnf install certbot -y<\/code><\/pre>\nNext, use Certbot to request a new Let's Encrypt certificate. Replace\u00a0webmin.your_domain.com<\/code>\u00a0with your domain and\u00a0your_email@example.com<\/code>\u00a0with your email address:<\/p>\nsudo certbot certonly --standalone -d webmin.your_domain.com -m your_email@example.com --agree-tos<\/code><\/pre>\nAfter the certificate is generated, your output should be similar to the following:<\/p>\n
Successfully received certificate.\r\nCertificate is saved at: \/etc\/letsencrypt\/live\/webmin.your_domain.com\/fullchain.pem\r\nKey is saved at: \/etc\/letsencrypt\/live\/webmin.your_domain.com\/privkey.pem\r\nThis certificate expires on 2025-01-03.\r\nThese files will be updated when the certificate renews.\r\nCertbot has set up a scheduled task to automatically renew this certificate in the background.<\/code><\/pre>\nIn this output, you have the following part. This indicates the path of the certificate file and the private key file. Copy these two paths and save them for the next step:<\/p>\n
Certificate is saved at: \/etc\/letsencrypt\/live\/webmin.your_domain.com\/fullchain.pem\r\nKey is saved at: \/etc\/letsencrypt\/live\/webmin.your_domain.com\/privkey.pem<\/code><\/pre>\nInstalling the Let's Encrypt Certificate<\/h3>\n
On Webmin, you can install the Let's Encrypt certificate you generated earlier by setting up certificate and private key paths.<\/p>\n
\n- Click Webmin<\/strong> in the left-hand menu, then Webmin Configuration<\/strong>.<\/li>\n
- Click on SSL Encryption<\/strong>.<\/li>\n
- On the SSL Settings<\/strong> tab set up the Private key file<\/strong> field to the path you copied earlier:
\/etc\/letsencrypt\/live\/webmin.your_domain.com\/privkey.pem<\/code><\/li>\n- Select the Certificate file<\/strong> as Separate file<\/strong>, and fill in the field with your certificate file:
\/etc\/letsencrypt\/live\/webmin.your_domain.com\/fullchain.pem<\/code><\/li>\n- Click Save<\/strong><\/li>\n<\/ol>\n
![\"Webmin](\"https:\/\/www.ssdnodes.com\/wp-content\/uploads\/2024\/10\/Webmin_LetsEncrypt-1024x598.webp\")
<\/p>\n
Restart Webmin on your Rocky Linux shell:<\/p>\n
sudo systemctl restart webmin<\/code><\/pre>\nWait for a few seconds while Webmin reboots, then refresh the page. Let's Encrypt should now be enabled with HTTPS protection.<\/p>\n
You can now use Webmin for web server management.<\/p>\n
Step 4: Using Webmin to Perform Basic Sysadmin Tasks<\/strong><\/h2>\nWebmin includes various modules for managing your system. In this step, you'll learn how to:<\/p>\n
\n- Use Webmin to view system log messages.<\/li>\n
- Change the Webmin Port<\/li>\n
- Navigate the file system.<\/li>\n
- Monitor server status.<\/li>\n
- Install and Update packages.<\/li>\n
- Manage Unix users and groups.<\/li>\n
- Handle Webmin accounts.<\/li>\n<\/ol>\n
View System Logs<\/h3>\n
In case you want to investigate and monitor your system, you can view your Rocky Linux server logs directly on the Webmin dashboard.<\/p>\n
\n- On the left-hand Webmin menu click System<\/strong> then System Logs<\/strong>.<\/li>\n
- On the toolbar, you can choose how many line you want to show and you can filter basic on specific text.<\/li>\n
- You can also choose between types of logs, such as errors, alerts, and debug messages.<\/li>\n<\/ol>\n
![\"Webmin](\"https:\/\/www.ssdnodes.com\/wp-content\/uploads\/2024\/10\/SystemLogs-1024x595.webp\")
<\/p>\n
Change the Webmin Port<\/h3>\n
You may want to change the default Webmin 10000<\/code> port so you can access your interface directly from a clean URL such as https:\/\/webmin.your_domain.com<\/code>, instead of the default https:\/\/webmin.your_domain.com:10000<\/code>.<\/p>\nTo achieve this, go to Webmin<\/strong> on the left-hand menu, then:<\/p>\n\n- Click Ports and Addresses<\/strong>.<\/li>\n
- Under Listen on port<\/strong>, change the
10000<\/code> default port to 443<\/code> HTTPS port.<\/li>\n- Click Save<\/strong>.<\/li>\n
- You\u2019ll be redirected to the new URL at
https:\/\/your_domain.com<\/code> or https:\/\/webmin.your_domain.com<\/code>.<\/li>\n<\/ol>\nWebmin File Manager<\/h3>\n
To view your Rocky Linux files directly from the Webmin UI:<\/p>\n
\n- On the left-hand Webmin menu click Tools<\/strong>.<\/li>\n
- Click on File Manager<\/strong>.<\/li>\n
- On the right menu, you can create new files, directories and even upload and download files from external URLs.
![\"Webmin](\"https:\/\/www.ssdnodes.com\/wp-content\/uploads\/2024\/10\/FileManager-1024x574.webp\")
<\/li>\n<\/ol>\nMonitoring Server Status<\/h3>\n
You can use Webmin to monitor services such as DHCP, PostgreSQL, and Sendmail servers.<\/p>\n
Navigate to Tools<\/strong>, then System and Server Status<\/strong>. Here you\u2019ll find all the services you can monitor:<\/p>\n![\"System](\"https:\/\/www.ssdnodes.com\/wp-content\/uploads\/2024\/10\/Monitor-1024x431.webp\")
<\/p>\n
Installing Packages<\/strong><\/h3>\nTo install a software package on Rocky Linux using Webmin, follow these steps:<\/p>\n
\n- On the left-hand Webmin menu click System<\/strong> then Software Packages<\/strong>.<\/li>\n
- Click Install a new package<\/strong>, then Select the Package from YUM<\/strong> radio button.<\/li>\n
- Type in the package name you want to install, for example
vim<\/code>, then click Install<\/strong>. You'll be taken to a page that asks you to confirm installing the package and it's dependencies.<\/li>\n- Click Install Now<\/strong>.<\/li>\n<\/ol>\n
![\"Installing](\"https:\/\/www.ssdnodes.com\/wp-content\/uploads\/2024\/10\/webmin-install-package-1024x348.webp\")
<\/p>\n
Updating Packages<\/h3>\n
To update all your packages to the latest version using Webmin, follow these steps:<\/p>\n
\n- Navigate to System<\/strong> then Software Package Updates<\/strong>.<\/li>\n
- Check and uncheck packages you want updated.<\/li>\n
- To update all packages, make sure they are all checked, then click Update Selected Packages<\/strong>. You'll go to a page listing the packages that will be updated.<\/li>\n
- Click Install Now<\/strong>.<\/li>\n<\/ol>\n
The update process will begin, and once it\u2019s complete, you might be prompted to reboot the system. To reboot click on the \"Reboot Now<\/strong>\" button.<\/p>\nManaging Unix Users and Groups<\/strong><\/h3>\n![\"Webmin](\"https:\/\/www.ssdnodes.com\/wp-content\/uploads\/2024\/10\/users_and_groups-1024x529.webp\")
<\/p>\n
A Unix user is a user that connects to your server via SSH or FTP, owns files, and has a home directory. In this section, we'll create a new user with a home directory and add them to the sudo<\/code> group for admin rights. We'll use example_user<\/code> but feel free to choose any other name.<\/p>\n\n- Click System<\/strong> > Users and Groups<\/strong>.You\u2019ll see a table for all the current system users under Local Users<\/strong> and a table for the current system groups under Local Groups<\/strong>.<\/li>\n
- In the Local Users<\/strong> table, click Create a new user<\/strong>.<\/li>\n
- Type in
example_user<\/code> in the Username<\/strong> field.<\/li>\n- Select Automatic<\/strong> for the User ID<\/strong> field.<\/li>\n
- For Real Name<\/strong>, set it to the full name of the user or add a descriptive name such as Testing User<\/strong> or Network User<\/strong>.<\/li>\n
- Select Automatic<\/strong> for the Home Directory<\/strong> field to be created automatically.<\/li>\n
- Set Shell<\/strong> to
bin\/bash<\/code>.<\/li>\n- Set Password<\/strong> to Normal password<\/strong> and insert a strong password for your user.<\/li>\n
- In the Group Membership<\/strong> menu, select New group with same name as user<\/strong> for the Primary group<\/strong>.<\/li>\n
- In the Secondary groups<\/strong>, click on sudo<\/strong> in the All groups<\/strong> list then click the right arrow. This adds
sudo<\/code> to the In groups<\/strong> list.<\/li>\n- Click Create<\/strong>.<\/li>\n<\/ol>\n
With this, you now have a new user called example_user<\/code> on your system with sudo<\/code> privileges.<\/p>\nCreating a Safe Webmin User<\/h3>\n
![\"Webmin](\"https:\/\/www.ssdnodes.com\/wp-content\/uploads\/2024\/10\/Webmin_Users-1-1024x456.webp\")
<\/p>\n
In addition to managing Unix users, Webmin also allows you to create a safe user with access to limited, non-critical modules. This is useful for users who don't need full system control but require access to certain tools, such as viewing or applying software updates.<\/p>\n
To create a safe Webmin user:<\/p>\n
\n- Click Webmin<\/strong> in the left menu, then Webmin Users<\/strong>.<\/li>\n
- Select Create a new safe user<\/strong>.<\/li>\n
- Enter a Username<\/strong> and set a strong password.<\/li>\n
- Check Force change at next login<\/strong> to ensure the user sets a new password.<\/li>\n
- Assign a Real Name<\/strong> (like \"Update Viewer\").<\/li>\n
- Under Security and limits options<\/strong>, set the Inactivity logout time<\/strong> (e.g., 30 minutes) and Minimum password length<\/strong>.<\/li>\n
- In Available Webmin modules<\/strong>, choose only the specific modules the user should access, like System and Server Status<\/strong>.<\/li>\n
- Click Create<\/strong>.<\/li>\n<\/ol>\n
The new user will only see the assigned modules when they log in, ensuring restricted access.<\/p>\n
Log out from Webmin by clicking the red logout icon at the bottom of the left-hand menu, and log in with the new user.<\/p>\n
Creating a Privileged Webmin User<\/h3>\n
If a user needs full system control, you can create a privileged Webmin account with administrative privileges. This user will have access to all Webmin modules or specific critical ones.<\/p>\n
To create a privileged Webmin user:<\/p>\n
\n- Click Webmin<\/strong> in the left menu, then
![\"Install](\"https:\/\/www.ssdnodes.com\/wp-content\/uploads\/2024\/10\/How-to-Install-Webmin-on-Rocky-Linux-9-Article-.jpg\")
<\/p>\n![\"Webmin](\"https:\/\/www.ssdnodes.com\/wp-content\/uploads\/2024\/10\/CERT_AUTHORITY_INVALID.webp\")
<\/p>\n![\"Webmin](\"https:\/\/www.ssdnodes.com\/wp-content\/uploads\/2024\/10\/dashboard-1024x390.png\")
<\/p>\n