News for hackers. Stuff that matters.

A comment on Dehydrated: Letsencrypt/acme client implemented as a shell-script. Parent comment

Re:Dehydrated: Letsencrypt/acme client implemented as a shel... by chx on Saturday April 20, 2024 @11:50AM (#40098251)
I mount webserver docroot and /etc/letsencrypt directories into the certbot container, /docroot and /etc/letsencrypt mount points respectively, it is totally prepared for this.
[ Parent | on HN ]
Re:Dehydrated: Letsencrypt/acme client implemented as a shel... by 9dev on Saturday April 20, 2024 @05:23PM (#40101139)
How did you implement reloading the modified TLS certificates after renewal tho?
[ Parent | on HN ]
Re:Dehydrated: Letsencrypt/acme client implemented as a shel... by chx on Saturday April 20, 2024 @07:26PM (#40101903)
it's a two line script running periodically. the first line is docker the second is nginx -s reload. As /etc/letsencrypt dir is mounted from nginx into certbot, certbot upgrades that, nginx reload picks them up. Easy as pie.
[ Parent | on HN ]