Differences

This shows you the differences between two versions of the page.

--- servers:bsd:nginx:lets_encrypt [2025/10/30 14:20] – Sean Rhone
+++ servers:bsd:nginx:lets_encrypt [2026/03/04 14:57] (current) – [Settings] Sean Rhone
@@ Line 1: / Line 1: @@
 ====== Information ======
-  * Let's Encrypt ((https://letsencrypt.org))
+  * Let's Encrypt ((https://letsencrypt.org/))
-  * Certbot ((https://certbot.eff.org))
+  * Certbot ((https://certbot.eff.org/))
-  * [[Information:Realm of Espionage]]
+  * [[information:realm_of_espionage|Realm of Espionage]]
 ===== Prerequisites =====
-  * [[bsd:server:freebsd_15.0|FreeBSD 15.0]]
+  * [[bsd:server:freebsd_16.0|FreeBSD 16.0]]
-  * [[servers:bsd:freenginx_php_php-fpm|freenginx + PHP + PHP-FPM]]
+  * [[servers:bsd:freenginx_php_php-fpm|freenginx]]
 ====== Dependencies ======
@@ Line 17: / Line 17: @@
 ====== Settings ======
+  * :!: Set ''email''
+  * TODO: ''chat''
   su -
@@ Line 23: / Line 26: @@
 <code>
-verbose = true
+verbose = 'true'
-text = true
+max-log-backups = '0'
-non-interactive = true
+text = 'true'
-standalone = true
+non-interactive = 'true'
-force-renewal = true
+standalone = 'true'
-agree-tos = true
+force-renewal = 'true'
+agree-tos = 'true'
-##################################################
+########################################
 email = espionage724@x
-##################################################
+########################################
-no-eff-email = true
+no-eff-email = 'true'
-rsa-key-size = 4096
+rsa-key-size = '4096'
-redirect = true
+redirect = 'true'
-hsts = true
+hsts = 'true'
-uir = true
+uir = 'true'
-staple-ocsp = false
+staple-ocsp = 'false'
+key-type = 'ecdsa'
+elliptic-curve = 'secp384r1'
-domains = realmofespionage.xyz, blog.realmofespionage.xyz, files.realmofespionage.xyz, forums.realmofespionage.xyz, media.realmofespionage.xyz, wiki.realmofespionage.xyz, social.realmofespionage.xyz, test.realmofespionage.xyz
+domains = 'realmofespionage.xyz, wiki.realmofespionage.xyz, media.realmofespionage.xyz, blog.realmofespionage.xyz, social.realmofespionage.xyz, forums.realmofespionage.xyz, status.realmofespionage.xyz, files.realmofespionage.xyz, test.realmofespionage.xyz'
 # End</code>
@@ Line 63: / Line 69: @@
 #!/bin/sh
-service 'nginx' stop
+cd '/tmp'
-certbot 'certonly' --config '/usr/local/etc/letsencrypt/cli-custom.ini' --quiet
+'/usr/sbin/service' 'nginx' stop
-service 'nginx' start
+'/usr/local/bin/certbot' 'certonly' --config '/usr/local/etc/letsencrypt/cli-custom.ini' --quiet
+'/usr/sbin/service' 'nginx' start
 # End</code>
@@ Line 73: / Line 81: @@
   su 'root' -c ~/'.local/scripts/www/certbot/certbot-renewal.sh'
-  ssh '192.168.1.152' -t "su 'root' -c ~/'.local/scripts/www/certbot/certbot-renewal.sh'"
+====== cron ======
-===== Temp Commands =====
+===== Renewal =====
-===== Obtain Updated Certs =====
-  * TODO: ''su - root -c'' one-shot
+  * Weekly (Sunday) ''07:00:00 AM''
   su -
-  service 'nginx' stop
+  ee '/etc/cron.d/certbot-renewal'
-  certbot 'certonly' --config '/usr/local/etc/letsencrypt/cli-custom.ini'
+<code>
+#
+SHELL=/bin/sh
-  service 'nginx' start
+7 * * sun root '/home/espionage724/.local/scripts/www/certbot/certbot-renewal.sh'
-====== Automatic Cert Renewal ======
+# End</code>
-  * TODO