Add dehydrated ssl certificate documentation

This commit is contained in:
Samuel Ortion 2022-08-17 09:18:35 +02:00
parent b90a0cd63a
commit 32a2b92f14
1 changed files with 54 additions and 0 deletions

View File

@ -140,5 +140,59 @@ sudo npm install -g yarn
yarn build
```
## Setup https certificates with dehydrated (only for public instances)
```bash
sudo apt-get install dehydrated
```
Edit `/etc/dehydrated/domains.txt` and add your domain name.
```bash
sudo vim /etc/dehydrated/domains.txt
```
Add acme-challenges alias to your nginx config:
```bash
server {
[...]
location /.well-known/acme-challenge {
alias /var/www/html/.well-known/acme-challenge;
allow all;
}
}
```
Create acme-challenge directory:
```bash
sudo mkdir -p /var/www/html/.well-known/acme-challenge
```
Adapt `/etc/dehydrated/config`, by adding this folder to the `WELLKNOWN` path:
```bash
WELLKNOWN = "/var/www/html/.well-known/acme-challenge"
```
Register to certificate issuer and accept conditions and terms:
```bash
dehydrated --register --accept-terms
```
Generate certificates:
```bash
dehydrated -c
```
Add dehydrated cron
```bash
sudo crontab -e
```
```bash
00 00 01 * * dehydrated -c
```
(This updates the certicates every first day of the month, feel free to adapt to your needs.)