3 ms·

Tip: there are ways to renew without running the standalone version (this means "host me a webserver to request my ssl") and thus not having to stop your http-s

Tip: there are ways to renew without running the standalone version (this means "host me a webserver to request my ssl") and thus not having to stop your http-server, but they require more work.

krkoch 10y ago
If you know how, please do tell or provide some pointers. It would be nice to set up at my site.
- loonattic 10y ago
  I use acme-tiny (with --acme-dir) and set up nginx to point the /.well-known/acme-challenge to a directory acme-tiny can write to. It should be possible to do reverse proxying with nginx for whatever web server hosts the acme challenges..
  - icebraining 10y ago
    +1, if you have just one server, it's merely a matter of adding location /.well-known/acme-challenge/ { alias {directory}; try_files $uri =404; } to the Nginx config of each site, then having a script on cron that generates the csr and calls acme_tiny. It's fairly easy to set up and you can be reasonably sure it won't screw up your site if it fails for some reason.
- wildpeaks 10y ago
  Look for the "webroot" mode of the official client (or one of the other lightweight clients). Example: https://gist.github.com/cecilemuller/a26737699a7e70a7093d4dc115915de8 https://gist.github.com/cecilemuller/a26737699a7e70a7093d4dc...