diff --git a/content/Linux/Certbot well-known auto renew.md b/content/Linux/Certbot well-known auto renew.md index 0a12e49..2c663ed 100644 --- a/content/Linux/Certbot well-known auto renew.md +++ b/content/Linux/Certbot well-known auto renew.md @@ -3,29 +3,38 @@ This is translation of article from [clsv.ru](https://clsv.ru/linux/lets_encrypt You'll need 4 scripts: 1. Authentication script, which will write authentication file: + ```shell #!/bin/bash echo $CERTBOT_VALIDATION > /var/www/html/.well-known/$CERTBOT_TOKEN ``` -2. Cleanup script, that will delete that + +2. Cleanup script, that will delete that + ```shell #!/bin/bash rm -f /var/www/html/.well-known/$CERTBOT_TOKEN ``` + 3. Initial cert acquiring script: + ```shell certbot certonly \ --preferred-challenges=http --manual \ --manual-auth-hook /path/to/auth.sh \ - --manual-cleanup-hook /oath/to/clean.sh - -d "vault48.org,*.vault48.org" \ + --manual-cleanup-hook /oath/to/clean.sh + -d "yourhost.org,*.yourhost.org" \ --manual-public-ip-logging-ok ``` -1. Renewal script itself to put it in crontab + +4. Renewal script itself, to put it in crontab (or /etc/cron.weekly) + ```shell certbot renew --manual-public-ip-logging-ok \ --manual-auth-hook /path/to/auth.sh \ --manual-cleanup-hook /path/to/clean.sh + +systemctl reload nginx ``` -Don't forget to configure your http server to serve `.well-known`. \ No newline at end of file +Don't forget to configure your http server to serve `.well-known`.