deb/apache-letsencrypt.bash
author Oleksandr Gavenko <gavenkoa@gmail.com>
Mon, 31 Jul 2023 00:21:56 +0300
changeset 28 47f47ba80e8d
child 29 74c62c0d1f64
permissions -rw-r--r--
Let's Encrypt webroot renewal method.
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
28
47f47ba80e8d Let's Encrypt webroot renewal method.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
     1
#!/bin/bash
47f47ba80e8d Let's Encrypt webroot renewal method.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
     2
47f47ba80e8d Let's Encrypt webroot renewal method.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
     3
mkdir /srv/www/letsencrypt
47f47ba80e8d Let's Encrypt webroot renewal method.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
     4
chown apache:apache /srv/www/letsencrypt
47f47ba80e8d Let's Encrypt webroot renewal method.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
     5
47f47ba80e8d Let's Encrypt webroot renewal method.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
     6
# service apache2 stop
47f47ba80e8d Let's Encrypt webroot renewal method.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
     7
# --standalone
47f47ba80e8d Let's Encrypt webroot renewal method.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
     8
sudo -u apache \
47f47ba80e8d Let's Encrypt webroot renewal method.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
     9
 certbot certonly --webroot \
47f47ba80e8d Let's Encrypt webroot renewal method.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    10
 --agree-tos --non-interactive \
47f47ba80e8d Let's Encrypt webroot renewal method.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    11
 -m gavenkoa@gmail.com \
47f47ba80e8d Let's Encrypt webroot renewal method.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    12
 -w /srv/www/letsencrypt \
47f47ba80e8d Let's Encrypt webroot renewal method.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    13
 --cert-name defun.work \
47f47ba80e8d Let's Encrypt webroot renewal method.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    14
 -d 2048.defun.work
47f47ba80e8d Let's Encrypt webroot renewal method.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    15
# service apache2 start
47f47ba80e8d Let's Encrypt webroot renewal method.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    16
47f47ba80e8d Let's Encrypt webroot renewal method.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    17
# https://wiki.debian.org/LetsEncrypt
47f47ba80e8d Let's Encrypt webroot renewal method.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    18
# python3-certbot-apache - Apache plugin for Certbot
47f47ba80e8d Let's Encrypt webroot renewal method.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    19
47f47ba80e8d Let's Encrypt webroot renewal method.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    20
# systemctl reload apache2
47f47ba80e8d Let's Encrypt webroot renewal method.
Oleksandr Gavenko <gavenkoa@gmail.com>
parents:
diff changeset
    21
# sudo certbot --apache --agree-tos --redirect -m youremail@email.com -d domainname.com -d www.domainname.com