Resolved Plesk on CentOS with kernel 4.14*? +https/Apache/nginx +repositories

[Martin_Sauer]

About to switch (again) to Plesk. Still some questions bug me before I finally do:

1. Esspecially kernel 4.14x in my case (projected EOL 2020) has me - Can i safely(1) upgrade CentOS7 to 4.14x kernel on an active Plesk (most current) installation?
2. I am afraid after browsing documentation I did not fully understand on how https traffic is handled in a mixed Apache/nginx configuration. While obvious in http, it is not explicitly stated for https.
   1. Is https communication between both servers for Apache/nginx handled like http?
   2. If yes to 1., is it a 1:1 assignment, aka 1nginx server block for each Apache instance or is it one "huge" nginx block as reverse proxy? Most likely it is 1:1 simply due to the letsencrypt certificates?
   3. Speaking about which (Lets encrypt): Do both servers (well nginx block vs Apache instance) deploy the same certificate?
   4. If not 3. what is deployed internally? If not letsencrypt its self-signed?
3. I read about repository handling of Plesk Onyx, where the OS repositories are used. Overall remarks between support and documentation left me with a blurred impression. Bottom line: Are epel and elrepo repository supported? And if not, is another repository supported (Atomic if I recall correctly?)

TIA

(1) Safely from a Plesk and support view. Yes of course its leading edge, yes of course its probably less stable than current CentOS LT-kernel. Still is it strongly advised against or "ok" or even strongly suggested to go for longterm stable kernel?

 

[IgorG]

Esspecially kernel 4.14x in my case (projected EOL 2020) has me - Can i safely(1) upgrade CentOS7 to 4.14x kernel on an active Plesk (most current) installation?

Yes, you can, but on your own risk. But we recommend to use latest available kernel from official OS vendor repository.

Are epel and elrepo repository supported? And if not, is another repository supported (Atomic if I recall correctly?)

Can I enable EPEL repository?
Atomic repo is supported too.

Is https communication between both servers for Apache/nginx handled like http?

Yes, port 7081, check /etc/httpd/conf.d/ssl.conf config file.