Hello Everyone welcome to todays video, today we are going to setup a hosted Unifi cloud controller and connect a local Unifi access point to it
then configure a local Wifi SSID, then connect a client to it.
Things you need for this
1. Digital ocean droplet/AWS/Vulture or similar
2.ubuntu 20.04 or later or similar based Nix O/S
3.Your own domain for ssl access, eg controller.yourdomain.com (GoDaddy etc.)
4.Ubiquity access point.
5.Firewall or Router to hand out DCHP addresses for your LAN devices.
Steps
1.Create droplet, setup the ssh keys and passphrase.
2. set hostname if not already done and install ufw firewall rules.
2.install ntp and reconfigure time zone
3.Update DNS to add in the new IP so your hostname resolves (Godaddy or whatever provider hosts your DNS domain).
4.setup the letsencrypt cert and script.
5.Configure controller, adopt access point, update firmware and create Wi-Fi network.
Firewall rules and enable
sudo ufw allow from x.x.x.x to any port 22 (where x.x.x.x is your WAN ip in the local site) allows ssh port.
sudo ufw allow from x.x.x.x to any port 8443 unifi controller web front end port.
sudo ufw allow 3478/udp stun port
sudo ufw allow 8080 port used by set inform
sudo ufw allow 8880 Guest portal ports
sudo ufw allow 8843 Guest port ports
sudo ufw allow 80 lets encrypt ports nothing active on here in any case.
sudo ufw allow 443 lets encrypt ports nothing active on here in any case.
sudo ufw enable turn on firewall
sudo ufw status lists your rules
Install packages commands used.
sudo apt-get update
sudo apt-get upgrade
sudo apt install haveged -y
sudo apt update && sudo apt install openjdk-8-jdk -y
echo 'deb http://www.ubnt.com/downloads/unifi/d... stable ubiquiti' | sudo tee /etc/apt/sources.list.d/100-ubnt-unifi.list
sudo wget -O /etc/apt/trusted.gpg.d/unifi-repo.gpg https://dl.ubnt.com/unifi/unifi-repo.gpg
sudo apt update && sudo apt install unifi -y
Now install the lets encrypt certbot and apache module to get a cert for the box.
sudo apt update && sudo apt install certbot python3-certbot-apache -y
sudo certbot --apache -d controller1.yourdomain.com #substitue for your FQDN here.
Script install (Credit to https://github.com/stevejenkins for this)
sudo wget https://raw.githubusercontent.com/ste... -O /usr/local/bin/unifi_ssl_import.sh
sudo chmod +x /usr/local/bin/unifi_ssl_import.sh
sudo nano -w /usr/local/bin/unifi_ssl_import.sh
Edit the contents and set the hostname and then correct distro as per video
set the hostname to match yours
UNIFI_HOSTNAME= controller1.yourdomain.com etc
Uncomment following three lines for Debian/Ubuntu (otherwise if you are on centos/Redhat skip this step)
#UNIFI_DIR=/var/lib/unifi
#JAVA_DIR=/usr/lib/unifi
#KEYSTORE=${UNIFI_DIR}/keystore
set LE_MODE=yes
Then run the script manually once, this copies the cert into the java keystore used by the controller.
./usr/local/bin/unifi_ssl_import.sh
Now add a symlink so the script is picked up as a hook when the lets encrypt cronjob (/etc/cron.d/certbot) runs to renew the cert,this saves having to run the script again manually later on.
ln -s /usr/local/bin/unifi_ssl_import.sh /etc/letsencrypt/renewal-hooks/deploy/01-unifi_ssl_import
Help Support the Channel:
To help support the channel we have listed a few decent providers that we like and use ourselves.
If you purchase a service from one of these links we may (hopefully) receive a commission, but it will not cost you anything extra.
It helps pay for our advertising, hosting and running costs and allows us to post free how too content etc.
==========================================
Tools and Links used in this Video:
Get a droplet in digital Ocean https://m.do.co/c/f2e5d955a265
Putty for ssh access :https://putty.org
Advanced IP Scanner https://www.advanced-ip-scanner.com/
=========================================
Watch video How to setup a Cloud Hosted Unifi Controller on Digital Ocean in 20 mins or less updated for 2021 online without registration, duration hours minute second in high quality. This video was added by user JDs Tech Tips 06 August 2021, don't forget to share it with your friends and acquaintances, it has been viewed on our site 2,204 once and liked it 31 people.