3 ms·
For certbot-nginx plugin users, I've had success with --webroot authentication: For nginx: location ^~ /.well-known/acme-challenge/ { default_type
by sk5t 9y ago
For certbot-nginx plugin users, I've had success with --webroot authentication:
For nginx:
location ^~ /.well-known/acme-challenge/ {
default_type "text/plain";
root /home/www/letsencrypt;
}
Then, for SELinux:
chcon -Rt httpd_sys_content_t /home/www
Reload nginx and 'certbot renew --webroot -w /home/www/letsencrypt' has a fighting chance.
- zingmars 9y agoI've been doing this ever since they released certbot, but I can't really vouch for the stability of this method. Changes to your virtual host config can break this very easily, especially if rewrites to https are involved.