| Next revision | Previous revision |
| servers:windows:nginx:lets_encrypt_simple-acme [2026/11/03 02:17] – created Sean Rhone | servers:windows:nginx:lets_encrypt_simple-acme [2026/11/03 13:45] (current) – [Manual] Sean Rhone |
|---|
| MOVE /Y "%UserProfile%\Downloads\simple-acme."*".win-arm64.trimmed.zip" "%UserProfile%\Downloads\simple-acme.win-arm64.trimmed.zip" & MKDIR "%SystemDrive%\www\simple-acme" & "%SystemRoot%\System32\tar.exe" -xf "%UserProfile%\Downloads\simple-acme.win-arm64.trimmed.zip" -C "%SystemDrive%\www\simple-acme" && DIR /B "%SystemDrive%\www\simple-acme\wacs.exe" | MOVE /Y "%UserProfile%\Downloads\simple-acme."*".win-arm64.trimmed.zip" "%UserProfile%\Downloads\simple-acme.win-arm64.trimmed.zip" & MKDIR "%SystemDrive%\www\simple-acme" & "%SystemRoot%\System32\tar.exe" -xf "%UserProfile%\Downloads\simple-acme.win-arm64.trimmed.zip" -C "%SystemDrive%\www\simple-acme" && DIR /B "%SystemDrive%\www\simple-acme\wacs.exe" |
| |
| ===== Certbot ===== | ====== Obtain Certs ====== |
| |
| "%LocalAppData%\Programs\Python\Python314-arm64\Scripts\pip.exe" install "certbot" | ===== Manual ===== |
| |
| ====== Settings ====== | * https://simple-acme.com/manual/advanced-use/ |
| | * https://simple-acme.com/reference/cli |
| | * Firewall TODO: https://github.com/win-acme/win-acme/issues/1307#issuecomment-2663793452 (''SYSTEM'') |
| |
| * https://eff-certbot.readthedocs.io/en/latest/using.html#certbot-command-line-options | * ''M'' |
| | * ''2: Manually enter host names'' |
| | * ''4: Single certificate'' |
| | * ''1: [http] Let simple-acme answer HTTP validation request'' |
| | * ''1: Generate an EC public/private key pair'' |
| | * ''4: Create PEM encoded files'' |
| | * ''File path:'' |
| | * ''6: No (additional) store steps'' |
| | * ''3: No (additional) installation steps'' |
| | * ''3: shortlived'' |
| |
| * :!: Set ''email'' | "%SystemRoot%\System32\netsh.exe" advfirewall firewall add rule name="simple-acme (HTTP)" dir="in" action="allow" program="%SystemDrive%\www\simple-acme\wacs.exe" protocol="tcp" localport="80" |
| |
| MKDIR "%SystemDrive%\www\certbot" | "%SystemDrive%\www\simple-acme\wacs.exe" |
| | |
| "%SystemRoot%\System32\notepad.exe" "%SystemDrive%\www\certbot\cli-custom.ini" | |
| |
| <code> | <code> |
| verbose = "true" | ‑‑notaskscheduler |
| max-log-backups = "0" | ‑‑profile |
| text = "true" | </code> |
| non-interactive = "true" | |
| standalone = "true" | |
| force-renewal = "true" | |
| agree-tos = "true" | |
| | |
| ######################################## | |
| email = espionage724@x | |
| ######################################## | |
| | |
| no-eff-email = "true" | |
| | |
| rsa-key-size = "4096" | |
| redirect = "true" | |
| hsts = "true" | |
| uir = "true" | |
| staple-ocsp = "false" | |
| key-type = "ecdsa" | |
| elliptic-curve = "secp384r1" | |
| | |
| domains = "wiki.realmofespionage.xyz" | |
| | |
| # End</code> | |
| | |
| ====== Obtain Certs ====== | |
| | |
| * :!: If it passes the dry run, remove the ''--dry-run'' argument and re-run | |
| |
| "%SystemRoot%\System32\netsh.exe" advfirewall firewall add rule name="Certbot (Standalone)" dir="in" action="allow" program="%LocalAppData%\Programs\Python\Python314-arm64\python.exe" protocol="tcp" localport="80" | realmofespionage.xyz,wiki.realmofespionage.xyz |
| |
| "%LocalAppData%\Programs\Python\Python314-arm64\Scripts\certbot.exe" "certonly" --config "%SystemDrive%\www\certbot\cli-custom.ini" --dry-run | C:\simple-acme\certs |
| |
| "%SystemRoot%\System32\netsh.exe" advfirewall firewall delete rule name="Certbot (Standalone)" | "%SystemRoot%\System32\netsh.exe" advfirewall firewall delete rule name="simple-acme (HTTP)" |
| |
| ====== Scripts ====== | ====== Scripts ====== |
