mirror of
https://github.com/muerwre/muerwre.github.io.git
synced 2025-04-24 18:36:41 +07:00
Update Certbot well-known auto renew script
This commit is contained in:
parent
d1afc3aeef
commit
be9db4c395
1 changed files with 14 additions and 5 deletions
|
@ -3,29 +3,38 @@ This is translation of article from [clsv.ru](https://clsv.ru/linux/lets_encrypt
|
|||
You'll need 4 scripts:
|
||||
|
||||
1. Authentication script, which will write authentication file:
|
||||
|
||||
```shell
|
||||
#!/bin/bash
|
||||
echo $CERTBOT_VALIDATION > /var/www/html/.well-known/$CERTBOT_TOKEN
|
||||
```
|
||||
|
||||
2. Cleanup script, that will delete that
|
||||
|
||||
```shell
|
||||
#!/bin/bash
|
||||
rm -f /var/www/html/.well-known/$CERTBOT_TOKEN
|
||||
```
|
||||
|
||||
3. Initial cert acquiring script:
|
||||
|
||||
```shell
|
||||
certbot certonly \
|
||||
--preferred-challenges=http --manual \
|
||||
--manual-auth-hook /path/to/auth.sh \
|
||||
--manual-cleanup-hook /oath/to/clean.sh
|
||||
-d "vault48.org,*.vault48.org" \
|
||||
-d "yourhost.org,*.yourhost.org" \
|
||||
--manual-public-ip-logging-ok
|
||||
```
|
||||
1. Renewal script itself to put it in crontab
|
||||
|
||||
4. Renewal script itself, to put it in crontab (or /etc/cron.weekly)
|
||||
|
||||
```shell
|
||||
certbot renew --manual-public-ip-logging-ok \
|
||||
--manual-auth-hook /path/to/auth.sh \
|
||||
--manual-cleanup-hook /path/to/clean.sh
|
||||
|
||||
systemctl reload nginx
|
||||
```
|
||||
|
||||
Don't forget to configure your http server to serve `.well-known`.
|
Loading…
Add table
Add a link
Reference in a new issue