Services/Nginx - Revision history

Tacoball: /* Add self-signed certificate */

2024-06-21T06:28:21Z

Add self-signed certificate

← Older revision		Revision as of 06:28, 21 June 2024
Line 75:		Line 75:
	openssl x509 -in cert.csr -out cert.pem -req -signkey key.pem -days 1001		openssl x509 -in cert.csr -out cert.pem -req -signkey key.pem -days 1001
	cat key.pem >> cert.pem		cat key.pem >> cert.pem
			cp cert.pem /etc/nginx/sites-available
	</source>		</source>

Line 83:		Line 84:
	access_log /var/log/nginx/my-vhost.access.log;		access_log /var/log/nginx/my-vhost.access.log;
	error_log /var/log/nginx/my-vhost.error.log;		error_log /var/log/nginx/my-vhost.error.log;
	ssl_certificate cert.pem;		ssl_certificate /etc/nginx/sites-available/cert.pem;
	ssl_certificate_key cert.pem;		ssl_certificate_key /etc/nginx/sites-available/cert.pem;

	location / {		location / {

2024-06-21T06:27:25Z

Add self-signed certificate

@@ Line 75: / Line 75: @@
 openssl x509 -in cert.csr -out cert.pem -req -signkey key.pem -days 1001
 cat key.pem >> cert.pem
 </source>

2024-06-21T06:15:19Z

Add self-signed certificate

← Older revision		Revision as of 06:15, 21 June 2024
Line 68:		Line 68:

	=== Add self-signed certificate ===		=== Add self-signed certificate ===

			<source lang="bash">
			cd ~
			openssl req -new > cert.csr
			openssl rsa -in privkey.pem -out key.pem
			openssl x509 -in cert.csr -out cert.pem -req -signkey key.pem -days 1001
			cat key.pem >> cert.pem
			</source>

	=== Certbot 2.x (Let's Encrypt) ===		=== Certbot 2.x (Let's Encrypt) ===

2024-06-21T06:01:43Z

Certbot 2.x (Let's Encrypt)

← Older revision		Revision as of 06:01, 21 June 2024
Line 66:		Line 66:
	sudo -u www-data ls -l /home/myaccount/vhost/my-vhost		sudo -u www-data ls -l /home/myaccount/vhost/my-vhost
	</source>		</source>

			=== Add self-signed certificate ===

	=== Certbot 2.x (Let's Encrypt) ===		=== Certbot 2.x (Let's Encrypt) ===

2024-06-21T04:40:29Z

Certbot trouble shooting

← Older revision		Revision as of 04:40, 21 June 2024
Line 115:		Line 115:
	sudo certbot renew -d wiki.tacosync.com --dry-run		sudo certbot renew -d wiki.tacosync.com --dry-run
	</source>		</source>

			=== Firewall Issue ===

			* Certbot need http access, so firewall should allow both http & https access.

2024-06-21T04:14:46Z

Certbot trouble shooting

← Older revision		Revision as of 04:14, 21 June 2024
Line 111:		Line 111:

	= Certbot trouble shooting =		= Certbot trouble shooting =

			<source lang="bash">
			sudo certbot renew -d wiki.tacosync.com --dry-run
			</source>

2024-06-21T04:14:18Z

2024-06-21T03:59:23Z

Setup virtual host proxy

← Older revision		Revision as of 03:59, 21 June 2024
Line 44:		Line 44:
	server {		server {
	server_name my-vhost.xxx.com;		server_name my-vhost.xxx.com;
			root /home/myaccount/vhost/my-vhost
	access_log /var/log/nginx/my-vhost.access.log;		access_log /var/log/nginx/my-vhost.access.log;
	error_log /var/log/nginx/my-vhost.error.log;		error_log /var/log/nginx/my-vhost.error.log;
Line 61:		Line 62:
	sudo systemctl reload nginx		sudo systemctl reload nginx
	sudo systemctl status nginx		sudo systemctl status nginx

			# check permission of static file
			sudo -u www-data ls -l /home/myaccount/vhost/my-vhost
	</source>		</source>

2024-06-21T03:30:11Z

Certbot 2.x (Let's Encrypt)

← Older revision		Revision as of 03:30, 21 June 2024
Line 69:		Line 69:
	<source lang="bash">		<source lang="bash">
	sudo snap install --classic certbot		sudo snap install --classic certbot
			# sudo ln -s /snap/bin/certbot /usr/bin/certbot
	</source>		</source>

2024-06-21T03:29:23Z

Certbot 2.x (Let's Encrypt)

← Older revision		Revision as of 03:29, 21 June 2024
Line 68:		Line 68:

	<source lang="bash">		<source lang="bash">
	~~# TODO~~		sudo snap install --classic certbot
	</source>		</source>