Відмінності між версіями «Https»

Матеріал з Wiki Welard
Перейти до навігації Перейти до пошуку
Рядок 11: Рядок 11:
  
  
−
[https://github.com/lukas2511/dehydrated dehydrated] - script which handle getting certificates
+
[https://github.com/lukas2511/dehydrated dehydrated] - script which handle getting certificates '''copy dehydrated to /usr/local/bin'''
  
−
[https://github.com/kappataumu/letsencrypt-cloudflare-hook hook] which used by dehydrated to contact cloudflare
+
[https://github.com/kappataumu/letsencrypt-cloudflare-hook hook] which used by dehydrated to contact cloudflare '''copy hook to /usr/local/bin'''
  
 
/etc/cron.d/dehydrated
 
/etc/cron.d/dehydrated
Рядок 29: Рядок 29:
 
/etc/dehydrated/domains.txt
 
/etc/dehydrated/domains.txt
 
  example.com www.example.com delta.example.com
 
  example.com www.example.com delta.example.com
 +
 +
Also possible to add these lines to start of /usr/local/bin/dehydrated
 +
#sleep random 45s before start dehydrated
 +
sleep $[($RANDOM%45)+1]s

Версія за 21:32, 26 січня 2017

https на сервер

Переходим на HTTPS на Nginx: шпаргалка

cloudflare

yum install python-pip python-cffi python2-cryptography dnspython python-enum34 python-future -y
yum install python-idna python-ipaddress python-ndg_httpsclient python-pyasn1 python-pycparser pyOpenSSL python-requests python-six python-wheel -y
pip install tld

Installing certbot certbot

yum install certbot -y


dehydrated - script which handle getting certificates copy dehydrated to /usr/local/bin

hook which used by dehydrated to contact cloudflare copy hook to /usr/local/bin

/etc/cron.d/dehydrated

0 5 * * * root /usr/local/bin/dehydrated -c &>/var/log/dehydrated.log

/etc/dehydrated/config

CHALLENGETYPE="dns-01"
CERTDIR="${BASEDIR}/certs"
ACCOUNTDIR="${BASEDIR}/accounts"
HOOK=/usr/local/bin/hook.py
[email protected]
export CF_EMAIL='[email protected]'
export CF_KEY='your_cloudflare_API_key'

/etc/dehydrated/domains.txt

example.com www.example.com delta.example.com

Also possible to add these lines to start of /usr/local/bin/dehydrated

#sleep random 45s before start dehydrated 
sleep $[($RANDOM%45)+1]s