https://wiki.bwt.com.de/index.php?action=history&feed=atom&title=Let%27s_Encrypt
Let's Encrypt - Revision history
2026-05-13T20:47:08Z
Revision history for this page on the wiki
MediaWiki 1.43.0
https://wiki.bwt.com.de/index.php?title=Let%27s_Encrypt&diff=369&oldid=prev
BrainwreckedTech: Made TOC float left
2019-12-11T08:12:47Z
<p>Made TOC float left</p>
<table style="background-color: #fff; color: #202122;" data-mw="interface">
<col class="diff-marker" />
<col class="diff-content" />
<col class="diff-marker" />
<col class="diff-content" />
<tr class="diff-title" lang="en">
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td>
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 04:12, 11 December 2019</td>
</tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l1">Line 1:</td>
<td colspan="2" class="diff-lineno">Line 1:</td></tr>
<tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"><div style="float:left; margin-right:0.5em; margin-bottom:0.5em;">__TOC__</div></ins></div></td></tr>
<tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"></ins></div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>= Prerequisites =</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>= Prerequisites =</div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr>
<!-- diff cache key MW_BWT:diff:1.41:old-362:rev-369:php=table -->
</table>
BrainwreckedTech
https://wiki.bwt.com.de/index.php?title=Let%27s_Encrypt&diff=362&oldid=prev
BrainwreckedTech: Created page.
2019-12-11T06:55:36Z
<p>Created page.</p>
<p><b>New page</b></p><div>= Prerequisites =<br />
<br />
; [[:Category:Web Server|Web Server]]<br />
: For automation of the certificate generation/renewal process.<br />
<br />
= Required Packages =<br />
<br />
{{bc|sudo pacman -Syu certbot<nowiki>[-nginx|-apache]</nowiki>}}<br />
<br />
= Web Server Configuration =<br />
<br />
== NginX Configuration ==<br />
<br />
{{bc|1=<br />
# ACME challenge<br />
location ^~ /.well-known {<br />
allow all;<br />
alias /var/lib/letsencrypt/$host/.well-known;<br />
default_type "text/plain";<br />
try_files $uri =404;<br />
}<br />
}}<br />
<br />
== Apache Configuration ==<br />
<br />
{{bc|1=<br />
Alias /.well-known/acme-challenge/ "/var/lib/letsencrypt/.well-known/$host/acme-challenge/"<br />
<Directory "/var/lib/letsencrypt/"><br />
AllowOverride None<br />
Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec<br />
Require method GET POST OPTIONS<br />
</Directory><br />
}}<br />
<br />
== Other Web Servers ==<br />
<br />
All other web servers will have to use the webroot method<br />
<br />
= Generating Certificates =<br />
<br />
{{bc|sudo certbot certonly --email <email> <nowiki>[--nginx|--apache|--webroot -w /var/lib/letsencrypt/$host -d $host]</nowiki> --agree-tos}}<br />
<br />
The {{ic|nginx}} and {{ic|apache}} plugins will guide you and help automate the process.<br />
<br />
= Renewing Certificates automatically =<br />
<br />
These will automatically renew your certificates every 2 months on the first Sunday of the month at 4am.<br />
<br />
== Systemd ==<br />
<br />
{{hc|/etc/systemd/system/certbot.service|2=<br />
[Unit]<br />
Description=Let's Encrypt renewal<br />
<br />
[Service]<br />
Type=oneshot<br />
ExecStart=/usr/bin/certbot renew --agree-tos --no-redirect<br />
}}<br />
<br />
{{hc|/etc/systemd/system/certbot.timer|2=<br />
[Unit]<br />
Description=Bi-monthly renewal of Let's Encrypt's certificates<br />
<br />
[Timer]<br />
OnCalendar=Sun *-1,3,5,7,9,11-1..7 04:00:00<br />
RandomizedDelaySec=1h<br />
Persistent=true<br />
<br />
[Install]<br />
WantedBy=timers.target<br />
}}<br />
<br />
== Crontab ==<br />
<br />
{{bc|0 4 1-7 2-12/2 0 /usr/bin/certbot renew --agree-tos --no-redirect}}</div>
BrainwreckedTech