From 3ea64d0245d839bead45ec1f737007f5f5a040c0 Mon Sep 17 00:00:00 2001 From: ctmbl Date: Sat, 27 Apr 2024 01:24:38 +0200 Subject: [PATCH] Improve renew certificates instructions --- README.md | 13 ++++++++++++- nginx.conf | 2 +- 2 files changed, 13 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index dc6704d..0a7508e 100644 --- a/README.md +++ b/README.md @@ -70,10 +70,21 @@ The certificates should have been generated in `certbot/conf/live/yourdomainname #### Renew SSL certification -If you just want to renew existing certificates, use: +If you just want to renew existing certificates you should use the designed script: +```bash +./scripts/renewssl.sh +``` +> Note that this script uses hardcoded absolute path designed for the iScsc VPS +If you want to here are the detailed steps: ```bash +# List existing certificates +docker compose run certbot certificates +# Renew certificates docker compose run --rm certbot renew +# Restart blog +docker compose stop blog +docker compose up --detach blog ``` #### Deploy the website itself diff --git a/nginx.conf b/nginx.conf index d298048..388f14d 100644 --- a/nginx.conf +++ b/nginx.conf @@ -33,7 +33,7 @@ http { listen 443 default_server ssl http2; listen [::]:443 ssl http2; - server_name www.iscsc.fr iscsc.fr; + server_name iscsc.fr; ssl_certificate /etc/nginx/ssl/live/iscsc.fr/fullchain.pem; ssl_certificate_key /etc/nginx/ssl/live/iscsc.fr/privkey.pem;