Web
Saphira Linux webDragon
A Saphira feature that turns a normal installation into a managed web platform: Nginx, PHP-FPM 8.5 and Node.js, with TLS you do not have to babysit. You own the machine; webDragon removes the repetitive systems administration.
Let's Encrypt certificates
webDragon obtains free TLS certificates from Let's Encrypt using Certbot, and saphira-site walks through the whole process: it confirms Certbot is installed, checks that DNS for the host points here, and verifies that public HTTP traffic can reach port 80 before it requests a certificate.
How issuance works
saphira-site offers three validation methods. Webroot is recommended when Nginx is already active and performs an HTTP-01 self-test before requesting the certificate. Standalone is available when nothing else is using port 80. DNS-01 is offered as a manual challenge for cases where HTTP validation is not suitable. Once a certificate is issued, saphira-site renders the TLS virtual host: a 443 server block with the certificate from /etc/letsencrypt/live/<host>/, an 80-to-443 redirect, and HSTS.
Renewal is automatic
After a certificate is obtained, its ongoing renewal is handled by Certbot's renewal timer — a normal Saphira service — which renews well before expiry. Renewal is therefore not a recurring manual administration task. saphira-site is responsible for obtaining and installing the certificate and the TLS configuration; Certbot owns the renewal afterwards.