RoE | Wiki

User Tools

Site Tools

Trace:
servers:linux:nginx:lets_encrypt

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
servers:linux:nginx:lets_encrypt [2025/04/25 00:34] – Fedora Server -> openSUSE TW Sean Rhoneservers:linux:nginx:lets_encrypt [2025/07/16 13:48] (current) – [Timer] Sean Rhone
Line 44: Line 44:
 hsts = true hsts = true
 uir = true uir = true
-staple-ocsp = true +staple-ocsp = false
- +
-pre-hook = systemctl stop 'nginx' +
-post-hook = systemctl start 'nginx'+
  
 domains = realmofespionage.xyz, blog.realmofespionage.xyz, files.realmofespionage.xyz, media.realmofespionage.xyz, wiki.realmofespionage.xyz domains = realmofespionage.xyz, blog.realmofespionage.xyz, files.realmofespionage.xyz, media.realmofespionage.xyz, wiki.realmofespionage.xyz
Line 55: Line 52:
 ====== Obtain Certs ====== ====== Obtain Certs ======
  
-  * :!: If it passes the dry run, remove the dry-run argument and re-run ((the dry run will likely fail the nginx restart step since the certs don't actually exist yet))+  * :!: If it passes the dry run, remove the dry-run argument and re-run
  
   sudo 'certbot' 'certonly' --config '/etc/letsencrypt/cli-custom.ini' --dry-run   sudo 'certbot' 'certonly' --config '/etc/letsencrypt/cli-custom.ini' --dry-run
Line 74: Line 71:
  
 ===== Timer ===== ===== Timer =====
 +
 +  * Weekly
  
   sudo -e '/etc/systemd/system/certbot-renew-custom.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'certbot-renew-custom.timer' --now   sudo -e '/etc/systemd/system/certbot-renew-custom.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'certbot-renew-custom.timer' --now
/srv/www/wiki/data/attic/servers/linux/nginx/lets_encrypt.1745555653.txt.gz · Last modified: by Sean Rhone