Differences

This shows you the differences between two versions of the page.

--- servers:bsd:nginx:lets_encrypt [2025/10/30 12:50] – Sean Rhone
+++ servers:bsd:nginx:lets_encrypt [2025/10/30 23:37] (current) – [Prerequisites] Sean Rhone
@@ Line 8: / Line 8: @@
   * [[bsd:server:freebsd_15.0|FreeBSD 15.0]]
-  * [[servers:bsd:freenginx_php_php-fpm|freenginx + PHP + PHP-FPM]]
+  * [[servers:bsd:freenginx_php_php-fpm|freenginx]]
 ====== Dependencies ======
@@ Line 17: / Line 17: @@
 ====== Settings ======
+  * :!: Set email
   su -
@@ Line 30: / Line 32: @@
 agree-tos = true
-##########
+##################################################
-#CHANGEME#
-##########
 email = espionage724@x
+##################################################
-##########
-#CHANGEME#
-##########
 no-eff-email = true
@@ Line 48: / Line 44: @@
 staple-ocsp = false
-domains = realmofespionage.xyz, blog.realmofespionage.xyz, files.realmofespionage.xyz, media.realmofespionage.xyz, wiki.realmofespionage.xyz
+domains = realmofespionage.xyz, blog.realmofespionage.xyz, files.realmofespionage.xyz, forums.realmofespionage.xyz, media.realmofespionage.xyz, wiki.realmofespionage.xyz, social.realmofespionage.xyz, test.realmofespionage.xyz
 # End</code>
@@ Line 60: / Line 56: @@
   certbot 'certonly' --config '/usr/local/etc/letsencrypt/cli-custom.ini' --dry-run
-===== Temp Commands =====
+====== Scripts ======
-===== Obtain Updated Certs =====
+===== Renewal =====
-  * TODO: ''su - root -c'' one-shot
+  mkdir -p ~/'.local/scripts/www/certbot' && ee ~/'.local/scripts/www/certbot/certbot-renewal.sh' && chmod +x ~/'.local/scripts/www/certbot/certbot-renewal.sh'
-  su -
+<code>
+#!/bin/sh
+service 'nginx' stop
+certbot 'certonly' --config '/usr/local/etc/letsencrypt/cli-custom.ini' --quiet
+service 'nginx' start
+# End</code>
-  service 'nginx' stop
+  ~/'.local/scripts/www/certbot/certbot-renewal.sh'
-  certbot 'certonly' --config '/usr/local/etc/letsencrypt/cli-custom.ini'
+  su 'root' -c ~/'.local/scripts/www/certbot/certbot-renewal.sh'
-  service 'nginx' start
+  ssh '192.168.1.152' -t "su 'root' -c ~/'.local/scripts/www/certbot/certbot-renewal.sh'"
 ====== Automatic Cert Renewal ======