some updates

This commit is contained in:
Randy Bush 2023-11-04 20:15:17 -07:00
parent e9b2abbfbe
commit d655ed1d93

View file

@ -15,6 +15,7 @@ chmod 750 work
# protect secrets
chmod 700 secrets
chmod 750 challenges
chgrp www-data challenges
```
challenges has to be readable by the web server, but this hack can only be done by root
@ -112,6 +113,11 @@ DocumentRoot "/home/acme/challenges"
Repeat the VirtualHost for all domains for which you are getting certificates.
Enable the acme virtual host
```
a2ensite acme
```
Don't forget to restart the Apache server
```
@ -184,4 +190,7 @@ acme ALL = (root) NOPASSWD: /usr/sbin/service
## Renewal
You can run the same script as above for certificate renewal.
You can run the same script as above for certificate renewal.
---
2023.11.04