10007.certbot.md

certbot - справочник

Create:

certbot certonly --email [email protected] --webroot -w /usr/share/nginx/html -d example.com
certbot certonly --email [email protected] --webroot -w /var/www/html/ -d example.com

List:

certbot certificates

Delete:

certbot delete --cert-name example.com

Renew:

certbot renew --post-hook "systemctl reload nginx"

====================================================================================

Setup nginx (/etc/nginx/letsencrypt.conf):

location ^~ /.well-known/acme-challenge/ {
  default_type "text/plain";
  root /usr/share/nginx/html;
}

Host.conf (after server_name):

include /etc/nginx/letsencrypt.conf;

====================================================================================

Setup httpd:

Alias /.well-known/acme-challenge/ "/var/lib/letsencrypt/.well-known/acme-challenge/"
<Directory "/var/lib/letsencrypt/">
    AllowOverride None
    Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec
    Require method GET POST OPTIONS
</Directory>

/etc/httpd/conf/httpd.conf

Include conf/httpd-acme.conf