Differences

This shows you the differences between two versions of the page.

--- servers:windows:nginx:lets_encrypt [2025/08/05 21:53] – [Test Renewal] Sean Rhone
+++ servers:windows:nginx:lets_encrypt [2025/10/07 01:08] (current) – [Python] Sean Rhone
@@ Line 7: / Line 7: @@
 ===== Prerequisites =====
-  * [[windows:10|Windows 10 (21H2)]]
+  * [[windows;11_ltsc_server|Windows 11 (24H2)]]
   * [[servers;windows;nginx_php_php-cgi|nginx]]
@@ Line 15: / Line 15: @@
   * https://www.python.org/downloads/windows/
-  * Last tested: ''python-3.13.5-amd64.exe''
+  * Last tested: ''python-3.13.7-amd64.exe''
-  * Install ''pip''
+  * Install ''pip'' ((nothing else (admin, PATH, etc) is required and can be unchecked))
 ===== Certbot =====
@@ Line 24: / Line 24: @@
   "%LocalAppData%\Programs\Python\Python313\Scripts\pip.exe" install "certbot"
-==== Update ====
-****
-  "%LocalAppData%\Programs\Python\Python313\Scripts\pip.exe" install --upgrade "certbot"
 ====== Settings ======
@@ Line 45: / Line 39: @@
 agree-tos = true
-##########
+##################################################
-#CHANGEME#
-##########
 email = espionage724@x
+##################################################
-##########
-#CHANGEME#
-##########
 no-eff-email = true
@@ Line 63: / Line 51: @@
 staple-ocsp = false
-domains = realmofespionage.xyz, blog.realmofespionage.xyz, files.realmofespionage.xyz, media.realmofespionage.xyz, wiki.realmofespionage.xyz
+domains = realmofespionage.xyz, blog.realmofespionage.xyz, files.realmofespionage.xyz, forums.realmofespionage.xyz, media.realmofespionage.xyz, wiki.realmofespionage.xyz, social.realmofespionage.xyz, test.realmofespionage.xyz
 # End</code>
 ====== Obtain Certs Test ======
+  * :!: Admin Command Prompt
   "netsh.exe" advfirewall firewall add rule name="Certbot (Standalone)" dir="in" action="allow" program="%LocalAppData%\Programs\Python\Python313\python.exe" protocol="tcp" localport="80"
@@ Line 76: / Line 66: @@
 ====== Scripts ======
-  * :!: 2025/03/15: TODO: Certbot needs admin for symlinks; possibly needs different scripting ((new certs filenames add #; tar archives, remove it, pull-in new certs; test with --test-certs)), and updated for temp firewall rule
   MKDIR "%SystemDrive%\www\scripts\certbot"
-  explorer "%SystemDrive%\www\scripts\certbot"
+  "explorer.exe" "%SystemDrive%\www\scripts\certbot"
 ===== Renewal =====
-  notepad "%SystemDrive%\www\scripts\certbot\Renewal.bat"
+  "notepad.exe" "%SystemDrive%\www\scripts\certbot\Renewal.bat"
 <code>
+@echo off
+:: Update Certbot
+CALL "%SystemDrive%\www\scripts\certbot\Update.bat"
 :: Stop nginx
 CALL "%SystemDrive%\www\scripts\nginx\Stop.bat"
 :: Renew Certs
-"%LocalAppData%\Programs\Python\Python313\Scripts\certbot.exe" "certonly" --config "%SystemDrive%\www\certbot\cli-custom.ini" --quiet
+sudo --disable-input "netsh.exe" advfirewall firewall add rule name="Certbot (Standalone)" dir="in" action="allow" program="%LocalAppData%\Programs\Python\Python313\python.exe" protocol="tcp" localport="80"
-:: Start nginx
+sudo --disable-input "%LocalAppData%\Programs\Python\Python313\Scripts\certbot.exe" "certonly" --config "%SystemDrive%\www\certbot\cli-custom.ini" --quiet
-CALL "%SystemDrive%\www\scripts\nginx\Start.bat"
-:: End</code>
+sudo --disable-input "netsh.exe" advfirewall firewall delete rule name="Certbot (Standalone)"
-  "%SystemDrive%\www\scripts\certbot\Renewal.bat"
-==== Test Renewal ====
-  * 2025/08/05: Works fine
-  "notepad.exe" "%SystemDrive%\www\scripts\certbot\Renewal-test.bat"
-<code>
-:: Stop nginx
-CALL "%SystemDrive%\www\scripts\nginx\Stop.bat"
-:: Renew Certs
-"netsh.exe" advfirewall firewall add rule name="Certbot (Standalone)" dir="in" action="allow" program="%LocalAppData%\Programs\Python\Python313\python.exe" protocol="tcp" localport="80"
-"%LocalAppData%\Programs\Python\Python313\Scripts\certbot.exe" "certonly" --config "%SystemDrive%\www\certbot\cli-custom.ini" --quiet
-"netsh.exe" advfirewall firewall delete rule name="Certbot (Standalone)"
+:: Copy/Update Certs
 "explorer.exe" "%SystemDrive%\Certbot\archive\realmofespionage.xyz"
 "explorer.exe" "%SystemDrive%\www\certbot\certs"
 "notepad.exe" "%SystemDrive%\www\nginx\conf.d\ssl.conf"
+:: Start nginx
+CALL "%SystemDrive%\www\scripts\nginx\Start.bat"
 :: End</code>
-  "%SystemDrive%\www\scripts\certbot\Renewal-test.bat"
+  "%SystemDrive%\www\scripts\certbot\Renewal.bat"
 ===== Update =====
-  notepad "%SystemDrive%\www\scripts\certbot\Update.bat"
+  "notepad.exe" "%SystemDrive%\www\scripts\certbot\Update.bat"
 <code>
+@echo off
 :: Update pip
 "%LocalAppData%\Programs\Python\Python313\python.exe" -m "pip" install --upgrade "pip" --quiet
@@ Line 144: / Line 124: @@
 ===== Desktop =====
-  * Right-click Desktop -> New -> Shortcut
 ==== Renewal ====