How to setup a Cloud Hosted Unifi Controller on Digital Ocean in 20 mins or less updated for 2021

Опубликовано: 06 Август 2021
на канале: JDs Tech Tips
2,204
31

Hello Everyone welcome to todays video, today we are going to setup a hosted Unifi cloud controller and connect a local Unifi access point to it
then configure a local Wifi SSID, then connect a client to it.

Things you need for this
1. Digital ocean droplet/AWS/Vulture or similar
2.ubuntu 20.04 or later or similar based Nix O/S
3.Your own domain for ssl access, eg controller.yourdomain.com (GoDaddy etc.)
4.Ubiquity access point.
5.Firewall or Router to hand out DCHP addresses for your LAN devices.


Steps

1.Create droplet, setup the ssh keys and passphrase.
2. set hostname if not already done and install ufw firewall rules.
2.install ntp and reconfigure time zone
3.Update DNS to add in the new IP so your hostname resolves (Godaddy or whatever provider hosts your DNS domain).
4.setup the letsencrypt cert and script.
5.Configure controller, adopt access point, update firmware and create Wi-Fi network.

Firewall rules and enable

sudo ufw allow from x.x.x.x to any port 22 (where x.x.x.x is your WAN ip in the local site) allows ssh port.
sudo ufw allow from x.x.x.x to any port 8443 unifi controller web front end port.
sudo ufw allow 3478/udp stun port
sudo ufw allow 8080 port used by set inform
sudo ufw allow 8880 Guest portal ports
sudo ufw allow 8843 Guest port ports

sudo ufw allow 80 lets encrypt ports nothing active on here in any case.
sudo ufw allow 443 lets encrypt ports nothing active on here in any case.

sudo ufw enable turn on firewall
sudo ufw status lists your rules


Install packages commands used.
sudo apt-get update
sudo apt-get upgrade
sudo apt install haveged -y
sudo apt update && sudo apt install openjdk-8-jdk -y
echo 'deb http://www.ubnt.com/downloads/unifi/d... stable ubiquiti' | sudo tee /etc/apt/sources.list.d/100-ubnt-unifi.list
sudo wget -O /etc/apt/trusted.gpg.d/unifi-repo.gpg https://dl.ubnt.com/unifi/unifi-repo.gpg
sudo apt update && sudo apt install unifi -y

Now install the lets encrypt certbot and apache module to get a cert for the box.

sudo apt update && sudo apt install certbot python3-certbot-apache -y
sudo certbot --apache -d controller1.yourdomain.com #substitue for your FQDN here.

Script install (Credit to https://github.com/stevejenkins for this)

sudo wget https://raw.githubusercontent.com/ste... -O /usr/local/bin/unifi_ssl_import.sh
sudo chmod +x /usr/local/bin/unifi_ssl_import.sh
sudo nano -w /usr/local/bin/unifi_ssl_import.sh

Edit the contents and set the hostname and then correct distro as per video

set the hostname to match yours
UNIFI_HOSTNAME= controller1.yourdomain.com etc

Uncomment following three lines for Debian/Ubuntu (otherwise if you are on centos/Redhat skip this step)
#UNIFI_DIR=/var/lib/unifi
#JAVA_DIR=/usr/lib/unifi
#KEYSTORE=${UNIFI_DIR}/keystore

set LE_MODE=yes


Then run the script manually once, this copies the cert into the java keystore used by the controller.
./usr/local/bin/unifi_ssl_import.sh

Now add a symlink so the script is picked up as a hook when the lets encrypt cronjob (/etc/cron.d/certbot) runs to renew the cert,this saves having to run the script again manually later on.
ln -s /usr/local/bin/unifi_ssl_import.sh /etc/letsencrypt/renewal-hooks/deploy/01-unifi_ssl_import




Help Support the Channel:
To help support the channel we have listed a few decent providers that we like and use ourselves.
If you purchase a service from one of these links we may (hopefully) receive a commission, but it will not cost you anything extra.
It helps pay for our advertising, hosting and running costs and allows us to post free how too content etc.


==========================================
Tools and Links used in this Video:
Get a droplet in digital Ocean https://m.do.co/c/f2e5d955a265
Putty for ssh access :https://putty.org
Advanced IP Scanner https://www.advanced-ip-scanner.com/
=========================================


Смотрите видео How to setup a Cloud Hosted Unifi Controller on Digital Ocean in 20 mins or less updated for 2021 онлайн без регистрации, длительностью часов минут секунд в хорошем качестве. Это видео добавил пользователь JDs Tech Tips 06 Август 2021, не забудьте поделиться им ссылкой с друзьями и знакомыми, на нашем сайте его посмотрели 2,204 раз и оно понравилось 31 людям.