User Tools

Site Tools


servers:linux:nginx:lets_encrypt

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
servers:linux:nginx:lets_encrypt [2025/09/11 06:43] – external edit 127.0.0.1servers:linux:nginx:lets_encrypt [2026/05/14 18:49] (current) – [Settings] Sean Rhone
Line 14: Line 14:
 **** ****
  
-  sudo zypper install 'python313-certbot'+  sudo zypper install 'python314-certbot'
  
 ====== Settings ====== ====== Settings ======
 +
 +  * :!: Set ''email''
  
   sudo mkdir -p '/etc/letsencrypt' && sudo -e '/etc/letsencrypt/cli-custom.ini'   sudo mkdir -p '/etc/letsencrypt' && sudo -e '/etc/letsencrypt/cli-custom.ini'
  
 <code> <code>
-verbose = true +verbose = 'true
-text = true +max-log-backups = '0' 
-non-interactive = true +text = 'true' 
-standalone = true +non-interactive = 'true' 
-force-renewal = true +standalone = 'true' 
-agree-tos = true+force-renewal = 'true' 
 +agree-tos = 'true'
  
-################################################## +######################################## 
-email = espionage724@x +email = 'espionage724@x' 
-##################################################+########################################
  
-no-eff-email = true+no-eff-email = 'true'
  
-rsa-key-size = 4096 +rsa-key-size = '4096' 
-redirect = true +redirect = 'true' 
-hsts = true +hsts = 'true' 
-uir = true +uir = 'true' 
-staple-ocsp = false+staple-ocsp = 'false
 +key-type = 'ecdsa' 
 +elliptic-curve = 'secp384r1'
  
 pre-hook = systemctl stop 'nginx' pre-hook = systemctl stop 'nginx'
 post-hook = systemctl start 'nginx' post-hook = systemctl start 'nginx'
  
-domains = realmofespionage.xyz, blog.realmofespionage.xyz, files.realmofespionage.xyz, media.realmofespionage.xyz, wiki.realmofespionage.xyz+domains = 'realmofespionage.xyz, wiki.realmofespionage.xyz, media.realmofespionage.xyz, blog.realmofespionage.xyz, social.realmofespionage.xyz, forums.realmofespionage.xyz, status.realmofespionage.xyz, files.realmofespionage.xyz, test.realmofespionage.xyz, chat.realmofespionage.xyz'
  
 # End</code> # End</code>
Line 65: Line 70:
 Type=oneshot Type=oneshot
  
-ExecStart='/usr/bin/certbot' 'certonly' --config '/etc/letsencrypt/cli-custom.ini' --quiet+WorkingDirectory=/tmp
  
-ExecStartPost='/usr/bin/sync'+ExecStart='/usr/bin/certbot'certonly' --config '/etc/letsencrypt/cli-custom.ini' --quiet
  
 # End</code> # End</code>
Line 73: Line 78:
 ===== Timer ===== ===== Timer =====
  
-  * Weekly+  * Weekly (Sunday) ''07:00:00 AM''
  
   sudo -e '/etc/systemd/system/certbot-renew-custom.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'certbot-renew-custom.timer' --now   sudo -e '/etc/systemd/system/certbot-renew-custom.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'certbot-renew-custom.timer' --now
Line 84: Line 89:
  
 [Timer] [Timer]
-OnCalendar=weekly+OnCalendar=Sun *-*-* 07:00:00
 Persistent=true Persistent=true
  
/srv/www/wiki/data/attic/servers/linux/nginx/lets_encrypt.1757587393.txt.gz · Last modified: by 127.0.0.1

Except where otherwise noted, content on this wiki is licensed under the following license: CC0 1.0 Universal
CC0 1.0 Universal Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki