Certbot: Difference between revisions

From Wiki
Jump to navigation Jump to search
Created page with "{{lowercase title}} https://www.digitalocean.com/community/tutorials/how-to-secure-nginx-with-let-s-encrypt-on-ubuntu-16-04 The <code>certbot</code> connects to Let's Encryp..."
 
No edit summary
Line 24: Line 24:
include snippets/ssl-certbot-renewal.conf;
include snippets/ssl-certbot-renewal.conf;
</pre>
</pre>
Restart nginx


Now run a command like this:
Now run a command like this:
Line 31: Line 33:
-d domain1.example.com \
-d domain1.example.com \
-d domain2.example.com
-d domain2.example.com
</pre>
Test with this:
<pre>
sudo certbot renew --dry-run
</pre>
</pre>

Revision as of 18:05, 19 April 2018

https://www.digitalocean.com/community/tutorials/how-to-secure-nginx-with-let-s-encrypt-on-ubuntu-16-04

The certbot connects to Let's Encrypt to obtain an SSL certificate for your server.

sudo add-apt-repository ppa:certbot/certbot
sudo apt-get update
sudo apt-get install python-certbot-nginx

Create the file /etc/nginx/snippets/ssl-certbot-renewal.conf:

# support for certbot ssl auto-renewal
location ^~ /.well-known/ {
    default_type "text/plain";
    root /var/www/html/;
}

Include the following line in the ssl config for each domain:

include snippets/ssl-certbot-renewal.conf;

Restart nginx

Now run a command like this:

certbot certonly --webroot --webroot-path=/var/www/html \
-d example.com \
-d domain1.example.com \
-d domain2.example.com

Test with this:

sudo certbot renew --dry-run