Custom SSL Certificate

Formbricks’ One-Click setup automatically creates an SSL certificate using Let’s Encrypt. However, some setups need a custom SSL certificate. This is common for intranets or systems with special certificate rules that use an internal or custom certificate authority (CA).

​

Step 1: Navigate to the Formbricks Folder

Move into the formbricks/ directory:

cd formbricks

​

Step 2: Create a Folder for SSL Certificates

Create a folder called certs and place your SSL certificate files inside:

mkdir certs
# Move your SSL certificate files to the certs folder
mv /path/to/your/fullchain.crt certs/
mv /path/to/your/cert.key certs/

​

Step 3: Understand SSL Certificate Files

• fullchain.crt – Your SSL certificate, including the full certificate chain.

• cert.key – The private key used to encrypt data.

​

Step 4: Set Correct File Permissions

Ensure the certificate files have the right permissions:

sudo chown root:root certs/*
sudo chmod 600 certs/*

​

Step 5: Update traefik.yaml

Modify the file to define HTTP and HTTPS settings:

entryPoints:
  web:
    address: ":80"
    http:
      redirections:
        entryPoint:
          to: websecure
          scheme: https
          permanent: true
  websecure:
    address: ":443"

providers:
  docker:
    watch: true
    exposedByDefault: false
  file:
    directory: /etc/traefik/dynamic

​

Step 6: Create certs-traefik.yaml

Create a certs-traefik.yaml file that specifies the path to your custom SSL certificate and key.

tls:
  certificates:
    - certFile: /certs/fullchain.crt
      keyFile: /certs/cert.key

​

Step 7: Update docker-compose.yml

Modify the configuration to enforce SSL. The rest of the configuration should remain the same as the One-Click setup:

services:
  formbricks:
    restart: always
    image: ghcr.io/formbricks/formbricks:latest
    depends_on:
      - postgres
    labels:
      - "traefik.enable=true"  # Enable Traefik for this service
      - "traefik.http.routers.formbricks.rule=Host(`my-domain.com`)"  # Use your actual domain or IP
      - "traefik.http.routers.formbricks.entrypoints=websecure"  # Use the websecure entrypoint (port 443 with TLS)
      - "traefik.http.routers.formbricks.tls=true"  # Enable TLS
      - "traefik.http.services.formbricks.loadbalancer.server.port=3000"  # Forward traffic to Formbricks on port 3000
    ports:
      - 3000:3000
    volumes:
      - uploads:/home/nextjs/apps/web/uploads/
    <<: *environment

  traefik:
    image: "traefik:v2.7"
    restart: always
    container_name: "traefik"
    depends_on:
      - formbricks
    ports:
      - "80:80"
      - "443:443"
      - "8080:8080"
    volumes:
      - ./traefik.yaml:/traefik.yaml
      - ./acme.json:/acme.json
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - ./certs:/certs
      - ./certs-traefik.yaml:/etc/traefik/dynamic/certs-traefik.yaml

​

Summary

• Navigate to the Formbricks folder

• Create a certs/ folder and move your certificate files inside.

• Ensure you have the correct certificate files (fullchain.crt and cert.key).

• Update file permissions for security.

• Modify traefik.yaml to handle HTTPS.

• Create certs-traefik.yaml to point to your certificate files.

• Update docker-compose.yml to use your custom SSL certificate.

This setup ensures that Formbricks securely communicates using your own SSL certificate. 🚀

If you have any questions or require help, feel free to reach out to us on GitHub Discussions. 😃