servers:bsd:nginx:lets_encrypt
Table of Contents
Information
Prerequisites
Dependencies
su -
pkg install 'py311-certbot'
Settings
su -
mkdir -p '/usr/local/etc/letsencrypt' && ee '/usr/local/etc/letsencrypt/cli-custom.ini'
verbose = true text = true non-interactive = true standalone = true force-renewal = true agree-tos = true ########## #CHANGEME# ########## email = espionage724@x ########## #CHANGEME# ########## no-eff-email = true rsa-key-size = 4096 redirect = true hsts = true uir = true staple-ocsp = false domains = realmofespionage.xyz, blog.realmofespionage.xyz, files.realmofespionage.xyz, media.realmofespionage.xyz, wiki.realmofespionage.xyz # End
Obtain Certs
If it passes the dry run, remove the
--dry-run
argument and re-run
su -
certbot 'certonly' --config '/usr/local/etc/letsencrypt/cli-custom.ini' --dry-run
Temp Commands
Obtain Updated Certs
- TODO:
su - root -c
one-shot
su -
service 'nginx' stop
certbot 'certonly' --config '/usr/local/etc/letsencrypt/cli-custom.ini'
service 'nginx' start
Automatic Cert Renewal
- TODO
/usr/local/www/wiki/data/pages/servers/bsd/nginx/lets_encrypt.txt · Last modified: by Sean Rhone