News for hackers. Stuff that matters.

A comment on On the fly SSL registration and renewal inside Nginx with Let's Encrypt.

Re:On the fly SSL registration and renewal inside Nginx with... by bmurphy1976 on Wednesday July 20, 2016 @10:34AM (#12129280)
Apparently this requires OpenResty. OpenResty is an app server type platform built on Nginx. This does not appear to work on your standard run-of-the-mill Nginx system package.

OpenResty is a cool project, but it brings a lot of additional infrastructure along with it that you may not want.

It would be nice of this was clearly indicated in the title of this post.

Updated: see comment below, the README has been clarified, you can run this with the nginx_lua extension. You don't necessarily need all of OpenResty.

[ Parent | on HN ]
Re:On the fly SSL registration and renewal inside Nginx with... by snaky on Wednesday July 20, 2016 @10:40AM (#12129332)
Actually it does not require OpenResty, just ngx_lua module.
[ Parent | on HN ]
Re:On the fly SSL registration and renewal inside Nginx with... by dsp1234 on Wednesday July 20, 2016 @10:45AM (#12129372)
Someone should update the Installation section. It currently states:

  Requirements:

    OpenResty 1.9.7.2 or higher
[ Parent | on HN ]
Re:On the fly SSL registration and renewal inside Nginx with... by nickblah on Wednesday July 20, 2016 @11:05AM (#12129559)
I've updated the requirements in the README. Thanks for pointing that out!
[ Parent | on HN ]
Re:On the fly SSL registration and renewal inside Nginx with... by bmurphy1976 on Wednesday July 20, 2016 @12:15PM (#12130177)
OK, that's great! I recant my earlier comment. :)
[ Parent | on HN ]
Re:On the fly SSL registration and renewal inside Nginx with... by snaky on Wednesday July 20, 2016 @01:35PM (#12130858)
btw, what is a 'lot of additional infrastructure' that OpenResty brings?
[ Parent | on HN ]
Re:On the fly SSL registration and renewal inside Nginx with... by gtirloni on Wednesday July 20, 2016 @11:37AM (#12129845)
Compiling nginx from scratch to include ngx_lua is a bummer because of all the added questions that need to be answered (packaging, repositories, automation, etc).

It becomes 98% of the time spent enabling this awesome feature (at least on CentOS and Fedora, from what I can tell there aren't RPM packages for ngx_lua).

[ Parent | on HN ]
Re:On the fly SSL registration and renewal inside Nginx with... by msumpter on Wednesday July 20, 2016 @04:23PM (#12132196)
That has been one of my major driving forces behind creating Dockerfiles/docker-compose my personal/work projects to stand up quick environments. Docker support on CentOS 5 doesn't exist but I only have a few servers left from that era luckily.

If you want to give this a try within Docker I setup a repo here to try it out: https://github.com/msumpter/docker-lua-resty-auto-ssl

[ Parent | on HN ]
Re:On the fly SSL registration and renewal inside Nginx with... by snaky on Wednesday July 20, 2016 @11:40AM (#12129875)
https://openresty.org/en/rpm-packages.html
[ Parent | on HN ]