Hestia CP security

Eris, Thanks for your reply. Yes I have SSH access to Ubuntu 20.04LTS without any issue.

Thing that worries me is what’s showing in HestiaCP panel. See #2 in the image below.
And I changed my password again as a precaution. See #1 in the image below.

The image also show 9-March-2021 Disable then enabled SSL Support for Mail. I did not do anything to Exim or Dcot.

image

I also did the “cat” command for;
/var/log/hestia/auth.log
/var/log/hestia/system.log and
/var/log/hestia/error.log

However, for the dates: 8-March-2021 I could not find anything unusual. All events were showing form my IP address.

Do you people remote into all HestiaCP installations?

The other thing you’ll notice from the image is that HestiaCP tried to initiate LE-SSL renewal. And it failed. The only workaround I have found is to “Disable” HTTPS redirects and let it run for a full day. It usually fixes the issue… And afterwards, I re-enable it.

Last time months ago, I reported this LE-SSL issue. And version 1.3.2 was supposed to fix it. We now on HestiaCP version 1.3.3 and the LE-SSL issue still exists.