First commit.

This commit is contained in:
Mehdi (OSX) 2023-11-22 15:19:05 +05:00
parent 734638870b
commit b1294b9490

View File

@ -24,7 +24,7 @@ ## Usage:
- After the certificates are created: - After the certificates are created:
- Make sure to mount both `certs/test.com/live` and `certs/test.com/archive` directory, and use `live/*.pem` certificates in your nginx config. - Make sure to mount both `certs/test.com/live` and `certs/test.com/archive` directory, and use `live/*.pem` certificates in your nginx config.
- Because archive directory has actual files, but live directory has symlink to archive. In archive, certs are stored like this fullchain1.pem, cert1.pem and number is increased based on renewals. But live folder has direct certificates without number like cert.pem, fullchain.pem - Because archive directory has actual files, but live directory has symlink to archive. In archive, certs are stored like this fullchain1.pem, cert1.pem and number is increased based on renewals. But live folder has direct certificates without number like cert.pem, fullchain.pem
- Also use: https://github.com/certbot/certbot/blob/master/certbot-nginx/certbot_nginx/_internal/tls_configs/options-ssl-nginx.conf - Also use certbot nginx options file in your nginx config: https://github.com/certbot/certbot/blob/master/certbot-nginx/certbot_nginx/_internal/tls_configs/options-ssl-nginx.conf
--- ---
@ -42,7 +42,7 @@ ## Example nginx config:
``` ```
## Important: ## Important:
- **In case of errors, try clearing certs/\* folder and retry.** _(Although keep .gitkeep file.)_ - **In case of errors, try clearing certs/\* folder and retry.** _(Although keep .gitkeep file inside.)_
- Use `dry_run=true` to test certbot instead of actually creating/renewing certificates. - Use `dry_run=true` to test certbot instead of actually creating/renewing certificates.
--- ---