---
title: "Cockpit"
weight: 1
# bookFlatSection: false
# bookToc: true
# bookHidden: false
# bookCollapseSection: false
# bookComments: false
# bookSearchExclude: false
---

# Cockpit

## Installation
Installer la paquet `cockpit`.

### Dépendances optionnelles
- `cockpit-pcp`: monitoring,
- `cockpit-storaged`: gestion du stockage,
- `cockpit-podman`: gestion de containers `podman`,
- `cockpit-machines`: gestion de machines virtuelles avec `libvirt`,
- `networkmanager`: gestion de la connexion réseau,
- `firewalld`: gestion du pare-feu,

## Configuration
### Configuration du reverse proxy
```ini
[WebService]
ProtocolHeader = X-Forwarded-Proto
ForwardedForHeader = X-Forwarded-For
```
#### Configuration Nginx
```nginx
server {
  listen 443 ssl http2;
  listen [::]:443 ssl http2;
  server_name cockpit.edgarpierre.fr;
  include conf/00-hsts.conf;

  location / {
    include conf/50-proxy.conf;
    include conf/50-ws-proxy.conf;

    proxy_pass http://localhost:9090;
  }
}
```

### Mise-à-jour des certificats
#### Script de déploiement certbot
```fish
/usr/bin/install -o cockpit-ws -g cockpit-ws -m 600 /etc/letsencrypt/live/huascaran.burkhart.ovh/privkey.pem /etc/cockpit/ws-certs.d/50-certbot.key
/usr/bin/install -o cockpit-ws -g cockpit-ws -m 600 /etc/letsencrypt/live/huascaran.burkhart.ovh/fullchain.pem /etc/cockpit/ws-certs.d/50-certbot.cert
/usr/bin/systemctl restart cockpit
```