diff --git a/pages/AcmeTinyNoApache.md b/pages/AcmeTinyNoApache.md index 2f676f3..3cef1b4 100644 --- a/pages/AcmeTinyNoApache.md +++ b/pages/AcmeTinyNoApache.md @@ -17,11 +17,14 @@ chmod 700 secrets chmod 750 challenges ``` -challenges has to be readable by the web server, but this hack can only be done by root +And challenges needs a self-referential sub-directory ``` -chown acme:www-data /home/acme/challenges -``` +mkdir /home/acme/challenges/.well-known +ln -s /home/acme/challenges /home/acme/challenges/.well-known/acme-challenge +chown -R acme:www-data challenges +chmow og+rx challenges +... I do not have git on small machines, so just grab the code with fetch. Being lazy, I just fetch the source into /home/acme. @@ -192,4 +195,4 @@ You can run the same script as above for certificate renewal. Put in acme's crontab. -2017.08.07 \ No newline at end of file +2022.01.09 \ No newline at end of file