Differences

This shows you the differences between two versions of the page.

--- servers:linux:nginx:lets_encrypt [2025/01/22 17:02] – Sean Rhone
+++ servers:linux:nginx:lets_encrypt [2025/07/16 13:48] (current) – [Timer] Sean Rhone
@@ Line 7: / Line 7: @@
 ===== Prerequisites =====
-  * [[linux:distros:server:fedora_server|Fedora Server]]
+  * [[linux:distros:server:opensuse_tumbleweed_server|openSUSE Tumbleweed (Server)]]
-  * [[servers;linux;nginx_php_php-fpm|nginx]] ((Certbot doesn't necessarily require nginx; if not using nginx then port 443/tcp likely needs to be opened and pre/post-hooks/service restarting changed))
+  * [[servers;linux;nginx_php_php-fpm|nginx]]
 ====== Dependencies ======
@@ Line 14: / Line 14: @@
 ****
-  sudo dnf install 'certbot'
+  sudo zypper install 'python313-certbot'
 ====== Settings ======
@@ Line 44: / Line 44: @@
 hsts = true
 uir = true
-staple-ocsp = true
+staple-ocsp = false
-pre-hook = systemctl stop 'nginx'
-post-hook = systemctl start 'nginx'
 domains = realmofespionage.xyz, blog.realmofespionage.xyz, files.realmofespionage.xyz, media.realmofespionage.xyz, wiki.realmofespionage.xyz
@@ Line 55: / Line 52: @@
 ====== Obtain Certs ======
-  * :!: If it passes the dry run, remove the dry-run argument and re-run ((the dry run will likely fail the nginx restart step since the certs don't actually exist yet))
+  * :!: If it passes the dry run, remove the dry-run argument and re-run
   sudo 'certbot' 'certonly' --config '/etc/letsencrypt/cli-custom.ini' --dry-run
 ====== Automatic Cert Renewal ======
-===== Disable Existing =====
-****
-  sudo systemctl disable --now 'certbot-renew' 'certbot-renew.timer'
 ===== Service =====
@@ Line 80: / Line 71: @@
 ===== Timer =====
+  * Weekly
   sudo -e '/etc/systemd/system/certbot-renew-custom.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'certbot-renew-custom.timer' --now