Difference between revisions of "Certbot Letsencrypt Setting up standard web servers"

From Define Wiki
Jump to navigation Jump to search
 
Line 1: Line 1:
Install certbot on an apache centos 7 server  
+
== Setup Apache ==
 +
 
 +
Install certbot on an apache centos 7 server
 +
 
<pre>
 
<pre>
 
yum install httpd
 
yum install httpd
Line 6: Line 9:
 
</pre>
 
</pre>
  
 +
== Setup Virtualhosts ==
  
 
Need to setup virtualhosts - setup httpd.conf first
 
Need to setup virtualhosts - setup httpd.conf first
Line 31: Line 35:
 
</pre>
 
</pre>
  
 +
== Install certbot ==
 
Add certbot  
 
Add certbot  
 
<pre>
 
<pre>
Line 37: Line 42:
 
</pre>
 
</pre>
  
 +
 +
== Run certbot ==
 
Run certbot
 
Run certbot
 
<pre>
 
<pre>
Line 42: Line 49:
 
</pre>
 
</pre>
  
 +
== Setup auto-renew ==
 
Make sure to auto-renew.  
 
Make sure to auto-renew.  
 
<pre>
 
<pre>
Line 49: Line 57:
 
</pre>
 
</pre>
  
 +
 +
== Perform a dry run ==
 
Perform a dry run  
 
Perform a dry run  
 
<pre>
 
<pre>
 
certbot renew --dry-run
 
certbot renew --dry-run
 
</pre>
 
</pre>

Latest revision as of 20:58, 27 November 2020

Setup Apache

Install certbot on an apache centos 7 server

yum install httpd
systemctl enable httpd
systemctl start httpd

Setup Virtualhosts

Need to setup virtualhosts - setup httpd.conf first

# add the following to the end of /etc/httpd/conf/httpd.conf
IncludeOptional sites-enabled/*.conf
mkdir /etc/httpd/sites-available /etc/httpd/sites-enabled

[root@wiki-dt ~]# cat /etc/httpd/sites-available/define-technology.com.conf
<VirtualHost *:80>
    ServerName wiki.define-technology.com
    ServerAlias define-technology.com
    DocumentRoot /var/www/html
    ErrorLog /var/log/httpd/wiki_error_log
    CustomLog /var/log/httpd/wiki_requests.log combined
</VirtualHost>


ln -s /etc/httpd/sites-available/define-technology.com.conf /etc/httpd/sites-enabled/define-technology.com.conf

systemctl restart httpd

Install certbot

Add certbot

yum -y install epel-release
yum -y install certbot python2-certbot-apache  mod_ssl


Run certbot

Run certbot

certbot --apache

Setup auto-renew

Make sure to auto-renew.

crontab -e
0 0,12 * * * python -c 'import random; import time; time.sleep(random.random() * 3600)' && certbot renew
# save and exit


Perform a dry run

Perform a dry run

certbot renew --dry-run