Okay, I got everything setup and love aaPanel. I got my cert through Let's Encrypt, but am getting ERR_CONNECTION_REFUSED when I try to connect through https. I saved the cert, turned on "force SSL", disabled apache, but I am getting this: Oct 21 19:00:06 srv1074425.hstgr.cloud nginx[286400]: nginx: [emerg] bind() to 0.0.0.0:888 failed (98: Address already in use) Oct 21 19:00:06 srv1074425.hstgr.cloud nginx[286400]: nginx: [emerg] bind() to 0.0.0.0:80 failed (98: Address already in use) Oct 21 19:00:06 srv1074425.hstgr.cloud nginx[286400]: nginx: [emerg] bind() to 0.0.0.0:888 failed (98: Address already in use) Oct 21 19:00:06 srv1074425.hstgr.cloud nginx[286400]: nginx: [emerg] bind() to 0.0.0.0:80 failed (98: Address already in use) Oct 21 19:00:07 srv1074425.hstgr.cloud nginx[286400]: nginx: [emerg] bind() to 0.0.0.0:888 failed (98: Address already in use) Oct 21 19:00:07 srv1074425.hstgr.cloud nginx[286400]: nginx: [emerg] bind() to 0.0.0.0:80 failed (98: Address already in use) Oct 21 19:00:07 srv1074425.hstgr.cloud nginx[286400]: nginx: [emerg] still could not bind() Oct 21 19:00:07 srv1074425.hstgr.cloud systemd[1]: nginx.service: Control process exited, code=exited, status=1/FAILURE Oct 21 19:00:07 srv1074425.hstgr.cloud systemd[1]: nginx.service: Failed with result 'exit-code'. Oct 21 19:00:07 srv1074425.hstgr.cloud systemd[1]: Failed to start nginx - high performance web server. From systemctl status nginx.service. Checked firewall and it seems to have SSL enabled. But nothing is bound on 443: Netid State Recv-Q Send-Q Local Address😛ort Peer Address😛ortProcess udp UNCONN 0 0 0.0.0.0:7080 0.0.0.0:* users🙁("litespeed",pid=264223,fd=11),("litespeed",pid=264221,fd=11)) udp UNCONN 0 0 0.0.0.0:20000 0.0.0.0:* users🙁("miniserv.pl",pid=1286,fd=5)) udp UNCONN 0 0 72.60.31.144:53 0.0.0.0:* users🙁("named",pid=831,fd=39)) udp UNCONN 0 0 72.60.31.144:53 0.0.0.0:* users🙁("named",pid=831,fd=38)) udp UNCONN 0 0 127.0.0.1:53 0.0.0.0:* users🙁("named",pid=831,fd=33)) udp UNCONN 0 0 127.0.0.1:53 0.0.0.0:* users🙁("named",pid=831,fd=32)) udp UNCONN 0 0 0.0.0.0:12376 0.0.0.0:* users🙁("webserver",pid=278605,fd=7),("webserver",pid=278604,fd=7)) udp UNCONN 0 0 0.0.0.0:111 0.0.0.0:* users🙁("rpcbind",pid=691,fd=5),("systemd",pid=1,fd=61)) udp UNCONN 0 0 127.0.0.1:323 0.0.0.0:* users🙁("chronyd",pid=741,fd=5)) udp UNCONN 0 0 127.0.0.1:1721 0.0.0.0:* users🙁("monarx-agent",pid=1297,fd=7)) udp UNCONN 0 0 [::1]:53 [::]:* users🙁("named",pid=831,fd=42)) udp UNCONN 0 0 [::1]:53 [::]:* users🙁("named",pid=831,fd=43)) udp UNCONN 0 0 [2a02:4780:2d:2692::1]:53 [::]:* users🙁("named",pid=831,fd=46)) udp UNCONN 0 0 [2a02:4780:2d:2692::1]:53 [::]:* users🙁("named",pid=831,fd=47)) udp UNCONN 0 0 [fe80::8e8:d4ff:feb5:74f9]%eth0:53 [::]:* users🙁("named",pid=831,fd=50)) udp UNCONN 0 0 [fe80::8e8:d4ff:feb5:74f9]%eth0:53 [::]:* users🙁("named",pid=831,fd=51)) udp UNCONN 0 0 [::]:12376 [::]:* users🙁("webserver",pid=278605,fd=10),("webserver",pid=278604,fd=10)) udp UNCONN 0 0 [::]:111 [::]:* users🙁("rpcbind",pid=691,fd=7),("systemd",pid=1,fd=63)) udp UNCONN 0 0 [::1]:323 [::]:* users🙁("chronyd",pid=741,fd=6)) tcp LISTEN 0 100 0.0.0.0:465 0.0.0.0:* users🙁("master",pid=1207,fd=96)) tcp LISTEN 0 100 0.0.0.0:25 0.0.0.0:* users🙁("master",pid=1207,fd=13)) tcp LISTEN 0 9 0.0.0.0:21 0.0.0.0:* users🙁("pure-ftpd",pid=138888,fd=4)) tcp LISTEN 0 128 0.0.0.0:22 0.0.0.0:* users🙁("sshd",pid=227322,fd=3)) tcp LISTEN 0 100 0.0.0.0:110 0.0.0.0:* users🙁("dovecot",pid=1280,fd=21)) tcp LISTEN 0 4096 0.0.0.0:111 0.0.0.0:* users🙁("rpcbind",pid=691,fd=4),("systemd",pid=1,fd=60)) tcp LISTEN 0 511 0.0.0.0:12376 0.0.0.0:* users🙁("webserver",pid=278605,fd=8),("webserver",pid=278604,fd=8)) tcp LISTEN 0 511 0.0.0.0:80 0.0.0.0:* users🙁("nginx",pid=210530,fd=9),("nginx",pid=210529,fd=9),("nginx",pid=139768,fd=9)) tcp LISTEN 0 100 0.0.0.0:143 0.0.0.0:* users🙁("dovecot",pid=1280,fd=38)) tcp LISTEN 0 10 72.60.31.144:53 0.0.0.0:* users🙁("named",pid=831,fd=41)) tcp LISTEN 0 10 72.60.31.144:53 0.0.0.0:* users🙁("named",pid=831,fd=40)) tcp LISTEN 0 511 0.0.0.0:888 0.0.0.0:* users🙁("nginx",pid=210530,fd=8),("nginx",pid=210529,fd=8),("nginx",pid=139768,fd=8)) tcp LISTEN 0 4096 127.0.0.1:65529 0.0.0.0:* users🙁("monarx-agent",pid=1297,fd=10)) tcp LISTEN 0 100 0.0.0.0:993 0.0.0.0:* users🙁("dovecot",pid=1280,fd=40)) tcp LISTEN 0 100 0.0.0.0:995 0.0.0.0:* users🙁("dovecot",pid=1280,fd=23)) tcp LISTEN 0 100 0.0.0.0:587 0.0.0.0:* users🙁("master",pid=1207,fd=92)) tcp LISTEN 0 511 127.0.0.1:6379 0.0.0.0:* users🙁("redis-server",pid=204573,fd=8)) tcp LISTEN 0 4096 0.0.0.0:7080 0.0.0.0:* users🙁("litespeed",pid=264223,fd=10),("litespeed",pid=264221,fd=10)) tcp LISTEN 0 10 127.0.0.1:53 0.0.0.0:* users🙁("named",pid=831,fd=36)) tcp LISTEN 0 10 127.0.0.1:53 0.0.0.0:* users🙁("named",pid=831,fd=34)) tcp LISTEN 0 4096 127.0.0.1:953 0.0.0.0:* users🙁("named",pid=831,fd=31)) tcp LISTEN 0 4096 0.0.0.0:8188 0.0.0.0:* users🙁("litespeed",pid=264224,fd=9),("litespeed",pid=264221,fd=9)) tcp LISTEN 0 4096 0.0.0.0:8188 0.0.0.0:* users🙁("litespeed",pid=264223,fd=8),("litespeed",pid=264221,fd=8)) tcp LISTEN 0 4096 0.0.0.0:20000 0.0.0.0:* users🙁("miniserv.pl",pid=1286,fd=4)) tcp LISTEN 0 4096 127.0.0.1:8891 0.0.0.0:* users🙁("opendkim",pid=910,fd=3)) tcp LISTEN 0 100 [::]:465 [::]:* users🙁("master",pid=1207,fd=97)) tcp LISTEN 0 100 [::]:25 [::]:* users🙁("master",pid=1207,fd=14)) tcp LISTEN 0 9 [::]:21 [::]:* users🙁("pure-ftpd",pid=138888,fd=5)) tcp LISTEN 0 128 [::]:22 [::]:* users🙁("sshd",pid=227322,fd=4)) tcp LISTEN 0 100 [::]:110 [::]:* users🙁("dovecot",pid=1280,fd=22)) tcp LISTEN 0 4096 [::]:111 [::]:* users🙁("rpcbind",pid=691,fd=6),("systemd",pid=1,fd=62)) tcp LISTEN 0 511 *:8288 : users🙁("httpd",pid=264228,fd=4),("httpd",pid=264102,fd=4),("httpd",pid=264101,fd=4),("httpd",pid=139404,fd=4)) tcp LISTEN 0 511 *:8289 : users🙁("httpd",pid=264228,fd=6),("httpd",pid=264102,fd=6),("httpd",pid=264101,fd=6),("httpd",pid=139404,fd=6)) tcp LISTEN 0 511 *:8290 : users🙁("httpd",pid=264228,fd=8),("httpd",pid=264102,fd=8),("httpd",pid=264101,fd=8),("httpd",pid=139404,fd=8)) tcp LISTEN 0 511 [::]:12376 [::]:* users🙁("webserver",pid=278605,fd=9),("webserver",pid=278604,fd=9)) tcp LISTEN 0 100 [::]:143 [::]:* users🙁("dovecot",pid=1280,fd=39)) tcp LISTEN 0 100 [::]:993 [::]:* users🙁("dovecot",pid=1280,fd=41)) tcp LISTEN 0 100 [::]:995 [::]:* users🙁("dovecot",pid=1280,fd=24)) tcp LISTEN 0 100 [::]:587 [::]:* users🙁("master",pid=1207,fd=93)) tcp LISTEN 0 10 [2a02:4780:2d:2692::1]:53 [::]:* users🙁("named",pid=831,fd=48)) tcp LISTEN 0 10 [2a02:4780:2d:2692::1]:53 [::]:* users🙁("named",pid=831,fd=49)) tcp LISTEN 0 4096 [::1]:953 [::]:* users🙁("named",pid=831,fd=54)) tcp LISTEN 0 10 [::1]:53 [::]:* users🙁("named",pid=831,fd=44)) tcp LISTEN 0 10 [::1]:53 [::]:* users🙁("named",pid=831,fd=45)) tcp LISTEN 0 80 *:3306 : users🙁("mariadbd",pid=905,fd=19)) tcp LISTEN 0 10 [fe80::8e8:d4ff:feb5:74f9]%eth0:53 [::]:* users🙁("named",pid=831,fd=52)) tcp LISTEN 0 10 [fe80::8e8:d4ff:feb5:74f9]%eth0:53 [::]:* users🙁("named",pid=831,fd=53)) Please help. I blew 10 hours on Virtualmin, just had to uninstall it. Everything seems to be working except SSL! Do I need to somehow install SSL on the core panel before I put it on the sites? I'm not even sure how to debug this from here... Thank you for your help.

Can't get Lets Encrypt to work (SSL)

aaP_trenttompkins

Okay, I got everything setup and love aaPanel. I got my cert through Let's Encrypt, but am getting ERR_CONNECTION_REFUSED when I try to connect through https. I saved the cert, turned on "force SSL", disabled apache, but I am getting this:

Oct 21 19:00:06 srv1074425.hstgr.cloud nginx[286400]: nginx: [emerg] bind() to 0.0.0.0:888 failed (98: Address already in use)
Oct 21 19:00:06 srv1074425.hstgr.cloud nginx[286400]: nginx: [emerg] bind() to 0.0.0.0:80 failed (98: Address already in use)
Oct 21 19:00:06 srv1074425.hstgr.cloud nginx[286400]: nginx: [emerg] bind() to 0.0.0.0:888 failed (98: Address already in use)
Oct 21 19:00:06 srv1074425.hstgr.cloud nginx[286400]: nginx: [emerg] bind() to 0.0.0.0:80 failed (98: Address already in use)
Oct 21 19:00:07 srv1074425.hstgr.cloud nginx[286400]: nginx: [emerg] bind() to 0.0.0.0:888 failed (98: Address already in use)
Oct 21 19:00:07 srv1074425.hstgr.cloud nginx[286400]: nginx: [emerg] bind() to 0.0.0.0:80 failed (98: Address already in use)
Oct 21 19:00:07 srv1074425.hstgr.cloud nginx[286400]: nginx: [emerg] still could not bind()
Oct 21 19:00:07 srv1074425.hstgr.cloud systemd[1]: nginx.service: Control process exited, code=exited, status=1/FAILURE
Oct 21 19:00:07 srv1074425.hstgr.cloud systemd[1]: nginx.service: Failed with result 'exit-code'.
Oct 21 19:00:07 srv1074425.hstgr.cloud systemd[1]: Failed to start nginx - high performance web server.

From systemctl status nginx.service.

Checked firewall and it seems to have SSL enabled. But nothing is bound on 443:

Netid State Recv-Q Send-Q udp UNCONN 0 0 udp UNCONN 0 0 udp UNCONN 0 0 udp UNCONN 0 0 udp UNCONN 0 0 udp UNCONN 0 0 udp UNCONN 0 0 udp UNCONN 0 0 udp UNCONN 0 0 udp UNCONN 0 0 udp UNCONN 0 0 udp UNCONN 0 0 udp UNCONN 0 0 udp UNCONN 0 0 udp UNCONN 0 udp UNCONN 0 udp UNCONN 0 0 udp UNCONN 0 0 udp UNCONN 0 0 tcp LISTEN 0 100 tcp LISTEN 0 100 tcp LISTEN 0 9 tcp LISTEN 0 128 tcp LISTEN 0 100 tcp LISTEN 0 4096 tcp LISTEN 0 511 tcp LISTEN 0 511 tcp LISTEN 0 100 tcp LISTEN 0 10 tcp LISTEN 0 10 tcp LISTEN 0 511 tcp LISTEN 0 4096 tcp LISTEN 0 100 tcp LISTEN 0 100 tcp LISTEN 0 100 tcp LISTEN 0 511 tcp LISTEN 0 4096 tcp LISTEN 0 10 tcp LISTEN 0 10 tcp LISTEN 0 4096 tcp LISTEN 0 4096 tcp LISTEN 0 4096 tcp LISTEN 0 4096 tcp LISTEN 0 4096 tcp LISTEN 0 100 tcp LISTEN 0 100 tcp LISTEN 0 9 tcp LISTEN 0 128 tcp LISTEN 0 100 tcp LISTEN 0 4096 tcp LISTEN 0 511 tcp LISTEN 0 511 tcp LISTEN 0 511 tcp LISTEN 0 511 tcp LISTEN 0 100 tcp LISTEN 0 100 tcp LISTEN 0 100 tcp LISTEN 0 100 tcp LISTEN 0 10 tcp LISTEN 0 10 tcp LISTEN 0 4096 tcp LISTEN 0 10 tcp LISTEN 0 10 tcp LISTEN 0 80 tcp LISTEN 0 tcp LISTEN 0 Local Address😛ort Peer Address😛ortProcess
0.0.0.0:7080 0.0.0.0:* users🙁("litespeed",pid=264223,fd=11),("litespeed",pid=264221,fd=11))
0.0.0.0:20000 0.0.0.0:* users🙁("miniserv.pl",pid=1286,fd=5))
72.60.31.144:53 0.0.0.0:* users🙁("named",pid=831,fd=39))
72.60.31.144:53 0.0.0.0:* users🙁("named",pid=831,fd=38))
127.0.0.1:53 0.0.0.0:* users🙁("named",pid=831,fd=33))
127.0.0.1:53 0.0.0.0:* users🙁("named",pid=831,fd=32))
0.0.0.0:12376 0.0.0.0:* users🙁("webserver",pid=278605,fd=7),("webserver",pid=278604,fd=7))
0.0.0.0:111 0.0.0.0:* users🙁("rpcbind",pid=691,fd=5),("systemd",pid=1,fd=61))
127.0.0.1:323 0.0.0.0:* users🙁("chronyd",pid=741,fd=5))
127.0.0.1:1721 0.0.0.0:* users🙁("monarx-agent",pid=1297,fd=7))
[::1]:53 [::]:* users🙁("named",pid=831,fd=42))
[::1]:53 [::]:* users🙁("named",pid=831,fd=43))
[2a02:4780:2d:2692::1]:53 [::]:* users🙁("named",pid=831,fd=46))
[2a02:4780:2d:2692::1]:53 [::]:* users🙁("named",pid=831,fd=47))
0 [fe80::8e8:d4ff:feb5:74f9]%eth0:53 [::]:* users🙁("named",pid=831,fd=50))
0 [fe80::8e8:d4ff:feb5:74f9]%eth0:53 [::]:* users🙁("named",pid=831,fd=51))
[::]:12376 [::]:* users🙁("webserver",pid=278605,fd=10),("webserver",pid=278604,fd=10))
[::]:111 [::]:* users🙁("rpcbind",pid=691,fd=7),("systemd",pid=1,fd=63))
[::1]:323 [::]:* users🙁("chronyd",pid=741,fd=6))
0.0.0.0:465 0.0.0.0:* users🙁("master",pid=1207,fd=96))
0.0.0.0:25 0.0.0.0:* users🙁("master",pid=1207,fd=13))
0.0.0.0:21 0.0.0.0:* users🙁("pure-ftpd",pid=138888,fd=4))
0.0.0.0:22 0.0.0.0:* users🙁("sshd",pid=227322,fd=3))
0.0.0.0:110 0.0.0.0:* users🙁("dovecot",pid=1280,fd=21))
0.0.0.0:111 0.0.0.0:* users🙁("rpcbind",pid=691,fd=4),("systemd",pid=1,fd=60))
0.0.0.0:12376 0.0.0.0:* users🙁("webserver",pid=278605,fd=8),("webserver",pid=278604,fd=8))
0.0.0.0:80 0.0.0.0:* users🙁("nginx",pid=210530,fd=9),("nginx",pid=210529,fd=9),("nginx",pid=139768,fd=9))
0.0.0.0:143 0.0.0.0:* users🙁("dovecot",pid=1280,fd=38))
72.60.31.144:53 0.0.0.0:* users🙁("named",pid=831,fd=41))
72.60.31.144:53 0.0.0.0:* users🙁("named",pid=831,fd=40))
0.0.0.0:888 0.0.0.0:* users🙁("nginx",pid=210530,fd=8),("nginx",pid=210529,fd=8),("nginx",pid=139768,fd=8))
127.0.0.1:65529 0.0.0.0:* users🙁("monarx-agent",pid=1297,fd=10))
0.0.0.0:993 0.0.0.0:* users🙁("dovecot",pid=1280,fd=40))
0.0.0.0:995 0.0.0.0:* users🙁("dovecot",pid=1280,fd=23))
0.0.0.0:587 0.0.0.0:* users🙁("master",pid=1207,fd=92))
127.0.0.1:6379 0.0.0.0:* users🙁("redis-server",pid=204573,fd=8))
0.0.0.0:7080 0.0.0.0:* users🙁("litespeed",pid=264223,fd=10),("litespeed",pid=264221,fd=10))
127.0.0.1:53 0.0.0.0:* users🙁("named",pid=831,fd=36))
127.0.0.1:53 0.0.0.0:* users🙁("named",pid=831,fd=34))
127.0.0.1:953 0.0.0.0:* users🙁("named",pid=831,fd=31))
0.0.0.0:8188 0.0.0.0:* users🙁("litespeed",pid=264224,fd=9),("litespeed",pid=264221,fd=9))
0.0.0.0:8188 0.0.0.0:* users🙁("litespeed",pid=264223,fd=8),("litespeed",pid=264221,fd=8))
0.0.0.0:20000 0.0.0.0:* users🙁("miniserv.pl",pid=1286,fd=4))
127.0.0.1:8891 0.0.0.0:* users🙁("opendkim",pid=910,fd=3))
[::]:465 [::]:* users🙁("master",pid=1207,fd=97))
[::]:25 [::]:* users🙁("master",pid=1207,fd=14))
[::]:21 [::]:* users🙁("pure-ftpd",pid=138888,fd=5))
[::]:22 [::]:* users🙁("sshd",pid=227322,fd=4))
[::]:110 [::]:* users🙁("dovecot",pid=1280,fd=22))
[::]:111 [::]:* users🙁("rpcbind",pid=691,fd=6),("systemd",pid=1,fd=62))
*:8288 : users🙁("httpd",pid=264228,fd=4),("httpd",pid=264102,fd=4),("httpd",pid=264101,fd=4),("httpd",pid=139404,fd=4))
*:8289 : users🙁("httpd",pid=264228,fd=6),("httpd",pid=264102,fd=6),("httpd",pid=264101,fd=6),("httpd",pid=139404,fd=6))
*:8290 : users🙁("httpd",pid=264228,fd=8),("httpd",pid=264102,fd=8),("httpd",pid=264101,fd=8),("httpd",pid=139404,fd=8))
[::]:12376 [::]:* users🙁("webserver",pid=278605,fd=9),("webserver",pid=278604,fd=9))
[::]:143 [::]:* users🙁("dovecot",pid=1280,fd=39))
[::]:993 [::]:* users🙁("dovecot",pid=1280,fd=41))
[::]:995 [::]:* users🙁("dovecot",pid=1280,fd=24))
[::]:587 [::]:* users🙁("master",pid=1207,fd=93))
[2a02:4780:2d:2692::1]:53 [::]:* users🙁("named",pid=831,fd=48))
[2a02:4780:2d:2692::1]:53 [::]:* users🙁("named",pid=831,fd=49))
[::1]:953 [::]:* users🙁("named",pid=831,fd=54))
[::1]:53 [::]:* users🙁("named",pid=831,fd=44))
[::1]:53 [::]:* users🙁("named",pid=831,fd=45))
*:3306 : users🙁("mariadbd",pid=905,fd=19))
10 [fe80::8e8:d4ff:feb5:74f9]%eth0:53 [::]:* users🙁("named",pid=831,fd=52))
10 [fe80::8e8:d4ff:feb5:74f9]%eth0:53 [::]:* users🙁("named",pid=831,fd=53))

Please help. I blew 10 hours on Virtualmin, just had to uninstall it. Everything seems to be working except SSL!

Do I need to somehow install SSL on the core panel before I put it on the sites? I'm not even sure how to debug this from here...

Thank you for your help.

aaP_trenttompkins

GTP5 said the issue was OpenLightSpeed binding to 443 before nginx could. I tried to disable it and restart but it still isn't working...

(Here is PHP info http://fullpriceexit.com/ ) Same file breaks on https.

[root@srv1074425 ~]# systemctl stop lsws
[root@srv1074425 ~]# systemctl stop ols
Failed to stop ols.service: Unit ols.service not loaded.
[root@srv1074425 ~]# systemctl restart nginx
Job for nginx.service failed because the control process exited with error code.
See "systemctl status nginx.service" and "journalctl -xeu nginx.service" for details.
[root@srv1074425 ~]# bt restart
Stopping Bt-Tasks... done
Stopping Bt-Panel... done
Starting Bt-Panel.... done
Starting Bt-Tasks... done
[root@srv1074425 ~]# systemctl disable lsws
Removed "/etc/systemd/system/multi-user.target.wants/lshttpd.service".
Removed "/etc/systemd/system/openlitespeed.service".
[root@srv1074425 ~]# systemctl restart nginx
Job for nginx.service failed because the control process exited with error code.
See "systemctl status nginx.service" and "journalctl -xeu nginx.service" for details.
[root@srv1074425 ~]# bt restart
Stopping Bt-Tasks... done
Stopping Bt-Panel... done
Starting Bt-Panel.... done
Starting Bt-Tasks... done

aaP_trenttompkins

GTP5 is trying to help. Not 100% sure why a conflict on port 888 would cause 443 to break (or why the default settings would cause a conflict). Here is what it said though, I don't quite get how I can just "move" nginx....

tcp LISTEN 0 511 0.0.0.0:888 users🙁("nginx",pid=210530,...))

tells us Engine X (which is aaPanel’s internal Nginx fork) is already bound to port 888.

So here’s how it works:

aaPanel UI runs on port 8888 (served by Bt-Panel, the Python panel backend).

Engine X (their lightweight internal reverse proxy) listens on port 888 for system tasks, app previews, and WAF handling.

So when you installed your full Nginx stack, it conflicted with aaPanel’s own Nginx instance — both trying to grab 888.

There are two safe paths:

Option 1: Change aaPanel’s Engine X port (cleanest)

You can reassign it to a harmless port (e.g., 8899) so your Nginx can run normally:

sed -i 's/:888/:8899/g' /www/server/panel/data/port.pl
bt restart

Then check that ss -tulnp | grep 8899 shows it moved, and restart your main Nginx:

systemctl restart nginx

Option 2: Disable Engine X (not recommended unless you’re sure)

If you don’t plan to use aaPanel’s built-in reverse proxy or WAF:

systemctl stop nginx
pkill -f "nginx: master process"
bt restart
systemctl restart nginx

Option 1 is safer — it keeps aaPanel happy and clears your port 888 conflict.
Once that’s done, your SSL site should come up instantly.

aaP_trenttompkins

Fixed by GTP5:

Yeah — that thread update’s solid. To clarify your doubt in the post:
Port 888 itself wouldn’t normally block 443, except when aaPanel’s internal Nginx (Engine X) is started by the panel service before your full Nginx instance. Both are named “nginx,” both read overlapping configs under /www/server/nginx/, and because the internal one binds 888 first, your system Nginx can’t initialize its worker pool or SSL sockets. That cascade triggers the 443 bind failure.

The move-port command I gave —

sed -i 's/:888/:8899/g' /www/server/panel/data/port.pl
bt restart

— doesn’t “move” your production Nginx; it just changes the internal aaPanel Engine X port so the two don’t collide. Your systemctl-managed Nginx will still live on 80 and 443.

If you want to verify before touching anything, you can run:

ps aux | grep nginx

and you’ll see two master processes:

one under /www/server/panel/… (the panel’s)

one under /usr/sbin/nginx (your actual web server).

Once you shift aaPanel off 888 and restart both, you should get a clean green active (running) for systemctl nginx and your HTTPS handshake will start succeeding.

Me:
So you are sure this will fix it?

sed -i 's/:888/:8899/g' /www/server/panel/data/port.pl
bt restart

Absolutely hermano — here’s the full clean sequence to safely move aaPanel off port 888 to 8899, free up Nginx, and get your HTTPS stack stable.
All commands assume you’re root on AlmaLinux and using firewalld.

🧩 Step-by-step Commands

1️⃣ Check what's bound to 888 (just for reference)

ss -tulnp | grep 888

2️⃣ Change aaPanel's internal port from 888 to 8899

echo '8899' > /www/server/panel/data/port.pl

3️⃣ Allow the new port in the firewall so you don't lose panel access

firewall-cmd --permanent --add-port=8899/tcp
firewall-cmd --reload

4️⃣ Restart aaPanel to apply the new port

bt restart

5️⃣ Confirm the panel moved and Nginx is now free to use 80/443

ss -tulnp | grep 8899
ss -tulnp | grep 888

6️⃣ Restart your main Nginx instance cleanly

systemctl restart nginx
systemctl status nginx

7️⃣ Optional sanity check (reload configuration only, no restart)

nginx -t && nginx -s reload

8️⃣ Finally, test the site

curl -I https://fullpriceexit.com

🧠 Notes

If you can reach the panel at https://YOURSERVERIP:8899, it worked.

If Nginx starts cleanly and curl -I shows 200 OK or 301/302, your HTTPS certificate is active.

You can later log into aaPanel and switch Force SSL back on.

That’s it — eight lines total. Once this runs, port 888 is freed, your main Nginx will own 80/443, and Let’s Encrypt will finally handshake properly.

Perfect — that’s exactly what we wanted to see.
aaPanel’s internal webserver (webserver process) is now bound to port 8899, which means port 888 is free and no longer blocking Nginx.

Now finish it off with just these two:

1️⃣ Confirm port 888 is now empty

ss -tulnp | grep 888

2️⃣ Restart your main nginx cleanly

systemctl restart nginx
systemctl status nginx

If status shows active (running) instead of failed, you’re golden — Nginx now owns 80 + 443, and https://fullpriceexit.com should finally load under SSL.

Hell yes — that’s a clean field report.

Port 8899 → aaPanel’s own webserver ✅
Port 888 → empty ✅

Now run the victory lap:

systemctl restart nginx
systemctl status nginx

If you see active (running), test it live:

curl -I https://fullpriceexit.com

You should get a 200 or 301/302 response and the certificate chain from Let’s Encrypt.
Then hit it in your browser — https://fullpriceexit.com should finally come up locked and green.

Me:
(systemctl restart nginx returned a PID and I sent a screenshot... All I do half the time is reply with screenshots LOL)

Good catch — that “invalid PID number” means the old nginx.pid file is stale (left behind from a crashed or half-started instance), so systemctl thinks Nginx is already running when it’s not. That’s why it won’t bind even though ports 80/443 are free.

Here’s the exact fix sequence:

1️⃣ Kill any ghost nginx processes

pkill -9 nginx

2️⃣ Remove the stale PID file

rm -f /www/server/nginx/logs/nginx.pid

3️⃣ Double-check ports are free

ss -tulnp | egrep ':80|:443'

4️⃣ Start nginx cleanly

systemctl start nginx
systemctl status nginx

If that runs without errors and shows active (running), try:

curl -I https://fullpriceexit.com

You should see the certificate chain and a clean HTTP 200/301 response.

And yeah. That fixed it. NFC why the default configs overlap to cause port conflicts.