Differences

This shows you the differences between two versions of the page.

--- servers:linux:nginx:lets_encrypt [2025/12/19 22:27] – Sean Rhone
+++ servers:linux:nginx:lets_encrypt [2025/12/31 23:33] (current) – Ubuntu -> oS TW Sean Rhone
@@ Line 7: / Line 7: @@
 ===== Prerequisites =====
-  * [[linux:distros:server:ubuntu_server|Ubuntu Server]]
+  * [[linux:distros:server:opensuse_tumbleweed_server|openSUSE Tumbleweed (Server)]]
   * [[servers:linux:nginx_php_php-fpm|nginx]]
@@ Line 14: / Line 14: @@
 ****
-  sudo apt install 'certbot'
+  sudo zypper install 'python313-certbot'
 ====== Settings ======
-  sudo -e '/etc/letsencrypt/cli-custom.ini'
+  sudo mkdir -p '/etc/letsencrypt' && sudo -e '/etc/letsencrypt/cli-custom.ini'
 <code>
@@ Line 28: / Line 28: @@
 agree-tos = true
-##################################################
+########################################
 email = espionage724@x
-##################################################
+########################################
 no-eff-email = true
@@ Line 50: / Line 50: @@
   * :!: If it passes the dry run, remove the dry-run argument and re-run
-  sudo ufw allow 'Nginx HTTP'
   sudo 'certbot' 'certonly' --config '/etc/letsencrypt/cli-custom.ini' --dry-run
   sudo systemctl stop 'nginx'
-  sudo ufw deny 'Nginx HTTP'
 ====== Automatic Cert Renewal ======
-===== Disable Default =====
-****
-  sudo systemctl disable 'certbot.timer' --now
 ===== Service =====
@@ Line 74: / Line 64: @@
 [Service]
 Type=oneshot
+WorkingDirectory=/etc/letsencrypt
 ExecStart='/usr/bin/certbot' 'certonly' --config '/etc/letsencrypt/cli-custom.ini' --quiet
@@ Line 83: / Line 75: @@
 ===== Timer =====
-  * Weekly
+  * Weekly (Sunday) ''07:00:00 AM''
   sudo -e '/etc/systemd/system/certbot-renew-custom.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'certbot-renew-custom.timer' --now
@@ Line 94: / Line 86: @@
 [Timer]
-OnCalendar=weekly
+OnCalendar=Sun *-*-* 07:00:00
 Persistent=true