How do I access via HTTP Protocol?

[buadamlaz]

Hello,
Currently, the Cockpit Web Portal is only accessible via HTTPS. I also want to access via HTTP, how can I achieve this?

(I need to provide remote access via KeenDNS via Keenetic Modem.)

Ubuntu 22.04.4 LTS - aarch64

sudo nano /lib/systemd/system/cockpit.service

  GNU nano 6.2                                             /lib/systemd/system/cockpit.service
[Unit]
Description=Cockpit Web Service
Documentation=man:cockpit-ws(8)
Requires=cockpit.socket
Requires=cockpit-wsinstance-http.socket cockpit-wsinstance-https-factory.socket
After=cockpit-wsinstance-http.socket cockpit-wsinstance-https-factory.socket

[Service]
RuntimeDirectory=cockpit/tls
# systemd  ^i  241 sets this automatically
Environment=RUNTIME_DIRECTORY=/run/cockpit/tls
ExecStartPre=+/usr/lib/cockpit/cockpit-certificate-ensure --for-cockpit-tls
ExecStart=/usr/lib/cockpit/cockpit-tls
User=cockpit-ws
Group=cockpit-ws
NoNewPrivileges=true
ProtectSystem=strict
ProtectHome=true
PrivateTmp=true
PrivateDevices=true
ProtectKernelTunables=true
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
MemoryDenyWriteExecute=true

sudo systemctl status cockpit.socket

● cockpit.socket - Cockpit Web Service Socket
     Loaded: loaded (/lib/systemd/system/cockpit.socket; enabled; vendor preset: enabled)
     Active: active (running) since Fri 2024-04-26 08:52:29 +03; 48min ago
   Triggers: ● cockpit.service
       Docs: man:cockpit-ws(8)
     Listen: [::]:9090 (Stream)
    Process: 3056 ExecStartPost=/usr/share/cockpit/motd/update-motd  localhost (code=exited, status=0/SUCCESS)
    Process: 3063 ExecStartPost=/bin/ln -snf active.motd /run/cockpit/motd (code=exited, status=0/SUCCESS)
      Tasks: 0 (limit: 3841)
     Memory: 2.8M
     CGroup: /system.slice/cockpit.socket

Apr 26 08:52:29 OdroidN2 systemd[1]: Starting Cockpit Web Service Socket...
Apr 26 08:52:29 OdroidN2 systemd[1]: Listening on Cockpit Web Service Socket.

sudo nano /lib/systemd/system/cockpit.socket

  GNU nano 6.2                                              /lib/systemd/system/cockpit.socket
[Unit]
Description=Cockpit Web Service Socket
Documentation=man:cockpit-ws(8)
Wants=cockpit-motd.service

[Socket]
ListenStream=9090
ExecStartPost=-/usr/share/cockpit/motd/update-motd '' localhost
ExecStartPost=-/bin/ln -snf active.motd /run/cockpit/motd
ExecStopPost=-/bin/ln -snf inactive.motd /run/cockpit/motd

[Install]
WantedBy=sockets.target

[martinpitt]

This has nothing to do with the systemd units. You can set this in cockpit.conf:

[WebService]
AllowUnencrypted=true

However, you must know what you are doing. Never do this with machines which are publicly accessible over the internet. The usual approach is to put a reverse proxy in front of Cockpit.