Differences

This shows you the differences between two versions of the page.

--- install [2023/03/06 15:54] – [letsencrypt / HTTPS] rene
+++ install [2024/08/05 17:28] (current) – rene
@@ Line 348: / Line 348: @@
 # it does also add some rewrite rules into your own base conf (/etc/apache2/sites-enabled/rene.conf), but these seem to be just fine.
+== Renewal (new) ==
+Open up port 80 in Apache conf:
+  vi /etc/apache2/ports.conf
-== Renewal ==
+Generate new certs (select option "3" and give correct base dir): /media/ssd/www/bernard.ee/):
-Certificates expire in 90 days, but renewal is automatic.
+  certbot certonly --force-renewal -d bernard.ee
+Check what was the new folder name created for new certs:
+  l /etc/letsencrypt/live/
+Change cert folder in Apache conf (SSLCertificateFile / SSLCertificateKeyFile):
+  apache_conf
+Restart apache:
+  apache_restart
+If new cert works then remove old certs directory:
+  rm -rf /etc/letsencrypt/live/bernard.ee-0002
+# Updating rene.ee....
+NB! Ilmselt tuleb DNS'i verificationit kasutada, sest wildcard serti ei saa HTTP'ga uuendada.... vist.... Seega all olev päris ei tööta...
+Disable index preview (as we need to make rene.ee publicly accessible for renewal)
+  /etc/apache2/sites-available/rene-le-ssl.conf
+  apatche_restart
+Removce htaccess to make rene.ee publicly accessible:
+  mv /media/ssd/www/rene.ee/.htaccess /media/ssd/www/rene.ee/xhtaccess
+Rund the command (NB! Mind that it's wildcard!) (/media/ssd/www/rene.ee):
+certbot certonly --force-renewal -d *.rene.ee
+Enable index htaccess
+  mv /media/ssd/www/rene.ee/xhtaccess /media/ssd/www/rene.ee/.htaccess
+Enable index showing
+  /etc/apache2/sites-available/rene-le-ssl.conf
+  apatche_restart
+Clean up afterwards from here (not needed for web server):
+  /etc/letsencrypt/renewal
+Close port 80:
+  vi /etc/apache2/ports.conf
+== Renewal (original) ==
+Certificates expire in 90 days. Renewal can only be automatic if port 80 is open... Which by default is not...
 You can check that the daemon is working: