# How to change graph dashboard domain name and generate new SSL certs for new domain? **URL:** \ **Category:** Percona Monitoring and Management (PMM)\ **Created:** [July 4, 2024, 2:21pm UTC](https://forums.percona.com/t/how-to-change-graph-dashboard-domain-name-and-generate-new-ssl-certs-for-new-domain/31433 "2024-07-04T14:21:53Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![qwerty](https://avatars.discourse-cdn.com/v4/letter/q/4491bb/32.png) [@qwerty](https://forums.percona.com/u/qwerty)\ **Post date:** [July 4, 2024, 2:21pm UTC](https://forums.percona.com/t/how-to-change-graph-dashboard-domain-name-and-generate-new-ssl-certs-for-new-domain/31433/1 "2024-07-04T14:21:53Z")
I am trying to change PPM graph domain which is on port 8080 to new domain name. I don’t know in which config file should I do that and I am not sure how to generate new SSL certs for that domain. I am running PPM in Docker container. ---
**Author:** ![matthewb](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/matthewb/32/34_2.png) [@matthewb](https://forums.percona.com/u/matthewb)\ **Post date:** [July 4, 2024, 2:47pm UTC](https://forums.percona.com/t/how-to-change-graph-dashboard-domain-name-and-generate-new-ssl-certs-for-new-domain/31433/2 "2024-07-04T14:47:03Z")
Hello @qwerty, > **[Percona Monitoring and Management - Secure](https://docs.percona.com/percona-monitoring-and-management/how-to/secure.html)** > > By Default, PMM ships with a self-signed certificate to enable usage out of the box. While this does enable users to have encrypted connections between clients (database clients and web/API clients) and the PMM server, it shouldn’t be considered a... The domain is configured by you. You simply create an `A` or `CNAME` record in your local DNS and point that to the IP of your host. In PMM Advanced Settings, set the domain name. ---
**Author:** ![qwerty](https://avatars.discourse-cdn.com/v4/letter/q/4491bb/32.png) [@qwerty](https://forums.percona.com/u/qwerty)\ **Post date:** [July 5, 2024, 8:53am UTC](https://forums.percona.com/t/how-to-change-graph-dashboard-domain-name-and-generate-new-ssl-certs-for-new-domain/31433/4 "2024-07-05T08:53:36Z")
> [@qwerty](#): > > by “local DNS” you probably mean at dashboard of domain provider? > > Also, how to automatically generate and renew SSL? I dont want every few months generating SSL certs with OpenSSL command and copy-pasting it to /srv/nginx in Docker. by “local DNS” you probably mean at dashboard of domain provider? Also, how to automatically generate and renew SSL? I dont want every few months generating SSL certs with OpenSSL command and copy-pasting it to /srv/nginx in Docker. Also, is there a way to change domain without access to domain provider dashboard? EDIT: It seems that my new domain works since when I enter [mydomain.com:8080](http://mydomain.com:8080) I can hit dashboard but Im getting error saying: `You cannot visit mydomain.com right now because the website uses HSTS. Network errors and attacks are usually temporary, so this page will probably work later.` ---
**Author:** ![matthewb](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/matthewb/32/34_2.png) [@matthewb](https://forums.percona.com/u/matthewb)\ **Post date:** [July 5, 2024, 2:45pm UTC](https://forums.percona.com/t/how-to-change-graph-dashboard-domain-name-and-generate-new-ssl-certs-for-new-domain/31433/5 "2024-07-05T14:45:38Z")
> [@qwerty](#): > > You cannot visit [mydomain.com](http://mydomain.com) right now because the website uses HSTS. This is browser problem. Google for answers on this. > [@qwerty](#): > > Also, how to automatically generate and renew SSL? I dont want every few months generating SSL certs with OpenSSL command and copy-pasting it to /srv/nginx in Docker. You can generate certs one time with 10 year expiration, or you can use a service like LetsEncrypt which generates 60 day certs and handles auto-renewal when configured correctly in crontab. ---
**Author:** ![qwerty](https://avatars.discourse-cdn.com/v4/letter/q/4491bb/32.png) [@qwerty](https://forums.percona.com/u/qwerty)\ **Post date:** [July 7, 2024, 4:48pm UTC](https://forums.percona.com/t/how-to-change-graph-dashboard-domain-name-and-generate-new-ssl-certs-for-new-domain/31433/6 "2024-07-07T16:48:59Z")
> [@matthewb](#): > > This is browser problem. Google for answers on this. Yea, true. Found out that its because Im using self-generated certificates. > [@matthewb](#): > > You can generate certs one time with 10 year expiration, or you can use a service like LetsEncrypt which generates 60 day certs and handles auto-renewal when configured correctly in crontab. Since Im running Percona in Docker container, LetsEncrypt must be installed on Docker, not host? Also, LetsEncrypt makes 2 files, .key and .pem. But Percona needs 4 keys mentioned in docs. ---
**Author:** ![matthewb](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/matthewb/32/34_2.png) [@matthewb](https://forums.percona.com/u/matthewb)\ **Post date:** [July 7, 2024, 11:10pm UTC](https://forums.percona.com/t/how-to-change-graph-dashboard-domain-name-and-generate-new-ssl-certs-for-new-domain/31433/7 "2024-07-07T23:10:03Z")
> [@qwerty](#): > > Since Im running Percona in Docker container, LetsEncrypt must be installed on Docker, not host? You can run it on the host, and bind-mount a directory into the container. Or yea, install it into the PMM container (which is probably easier overall). The .pem files will be all you need. You can extract the 4 different files from these pems.