RoE | Wiki

User Tools

Site Tools

Trace:
servers:linux:nginx:lets_encrypt

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
servers:linux:nginx:lets_encrypt [2024/08/13 16:48] – external edit 127.0.0.1servers:linux:nginx:lets_encrypt [2025/04/25 00:51] (current) – [Timer] Sean Rhone
Line 7: Line 7:
 ===== Prerequisites ===== ===== Prerequisites =====
  
-  * [[distros:fedora_server|Fedora Server]] +  * [[linux:distros:server:opensuse_tumbleweed_server|openSUSE Tumbleweed (Server)]] 
-  * [[servers;linux;nginx_php_php-fpm|nginx + PHP + PHP-FPM]] ((Certbot doesn't necessarily require nginx; if not using nginx then port 443/tcp likely needs to be opened and pre/post-hooks/service restarting changed))+  * [[servers;linux;nginx_php_php-fpm|nginx]]
  
 ====== Dependencies ====== ====== Dependencies ======
Line 14: Line 14:
 **** ****
  
-  sudo dnf install 'certbot'+  sudo zypper install 'python313-certbot'
  
 ====== Settings ====== ====== Settings ======
- 
-  *  :!: Be sure to change the email address 
-  * :!: Any new domains added need to be added to Namecheap as well 
-  * ''must-staple = true'' is disabled due to being incompatible with Firefox ((last tested 2019/06/28 with Firefox 67.0.4; it didn't work; likely a config error on my part since this hasn't worked at all since 2018)) 
  
   sudo mkdir -p '/etc/letsencrypt' && sudo -e '/etc/letsencrypt/cli-custom.ini'   sudo mkdir -p '/etc/letsencrypt' && sudo -e '/etc/letsencrypt/cli-custom.ini'
  
 <code> <code>
 +# letsencrypt/cli-custom.ini
 +
 verbose = true verbose = true
 text = true text = true
Line 53: Line 51:
 post-hook = systemctl start 'nginx' post-hook = systemctl start 'nginx'
  
-domains = realmofespionage.xyz, blog.realmofespionage.xyz, files.realmofespionage.xyz, media.realmofespionage.xyz, social.realmofespionage.xyz, test.realmofespionage.xyz, wiki.realmofespionage.xyz, wow.realmofespionage.xyz+domains = realmofespionage.xyz, blog.realmofespionage.xyz, files.realmofespionage.xyz, media.realmofespionage.xyz, wiki.realmofespionage.xyz
  
 # End</code> # End</code>
Line 64: Line 62:
  
 ====== Automatic Cert Renewal ====== ====== Automatic Cert Renewal ======
- 
-===== Disable Existing ===== 
- 
-**** 
- 
-  sudo systemctl disable --now 'certbot-renew' 'certbot-renew.timer' 
  
 ===== Service ===== ===== Service =====
Line 76: Line 68:
  
 <code> <code>
 +# certbot-renew-custom.service
 +
 [Service] [Service]
 Type=oneshot Type=oneshot
Line 88: Line 82:
  
 <code> <code>
 +# certbot-renew-custom.timer
 +
 [Unit] [Unit]
 Description=Let's Encrypt Certificate Renewal Description=Let's Encrypt Certificate Renewal
/srv/www/wiki/data/attic/servers/linux/nginx/lets_encrypt.1723582082.txt.gz · Last modified: by 127.0.0.1