In either scenario, obtaining a cert from a recognized authority will resolve browser warnings. Once you have downloaded and extracted the cert files you’ll upload them to the Webmin server. You’ll need a domain name with a registrar (GoDaddy, Cloudflare, etc.) and DNS records that point to your registered domain. Use a registered domain name to obtain a SSL certificate from LetsEncrypt.If you’re fine with that and you only plan on accessing it locally, you’re good to go. Once you’ve got the DNS rewrite in place, you should be able to access your instance with Most likely, though, the browser won’t accept the cert still. If not, you’ll need to modify the hosts file on any machine you plan on using to access Webmin. Since you’ve already got a Pi…consider adding Pi Hole or Adguard for DNS rewrites. Webmin by default uses its own cert, but you’ll need to rewrite your URL to something that isn’t an IP address. Configure users with strong passwords and 2FA.Since all requests go to the reverse proxy, the firewall on my server machine only allows requests to port 10000 from the IP address of the reverse proxy server. I have my server behind a reverse proxy all requests for are handled, locally, by my DNS server rewrite rules. You can do this either through the Webmin configuration tool, or the UFW firewall. Limit the IP addresses that have access to your server.To access my server, I’ve got to either be on my home network or connected to my VPN. Don’t make Webmin accessible outside of the network.Couple of things to consider doing in order to make it a little easier. Why? Because anyone with access to your server can make changes to your machine. Securing your serverīig deal: secure your Webmin instance. You’ll also probably want to make it easier to access in your own network. Since you now have a browser-accessible server that can make changes to your Linux machine, you’ll need to set up a few basic items. Move on through it to get to the dashboard. You’ll get a security warning at first, since Webmin by default has SSL enabled. Sudo ufw allow from your.ip.address to any port 10000Īt this point you should be able to access Webmin by going to on the local machine browser, or by going to on another machine on the network. Access to the terminal window (either directly or through SSH or a remote viewer)įirst up make sure your system is up to date.A Linux-based machine and a user with root or sudo access.Even if you only have one machine to manage, as a Windows-trained user I find Webmin easier to set up and work with than VNC or SSH. Likewise, you’ll be able to access each machine directly through the master server. After installing Webmin on each machine you can set up a cluster so that you can manage all machines at once. I’m not fond of open network ports, so managing all those pis via webmin allows me to close off pretty much all ports but the few that have to be open. Its surprisingly robust given that its freeware, but it makes remote management a breeze. Webmin is a browser-based interface that allows you to perform maintenance on headless machines without needing to use SSH programs like PuTTY or winSCP.

Webmin raspberry pi 2