certbot
- https://certbot.eff.org/instructions?ws=nginx&os=debianbuster
- include snippets/letsencrypt-acme-challenge.conf;
- certbot --nginx --expand --redirect --cert-name bubuit.net -d DOM.TLD,SUBDOM.DOM.TLD
- # KEIN ABSTAND KOMMA
letsencrypt acme challenge
/etc/nginx/snippets/letsencrypt-acme-challenge.conf
# We use ^~ here, so that we don't check other regexes (for speed-up). We actually MUST cancel
# other regex checks, because in our other config files have regex rule that denies access to files with dotted names.
location ^~ /.well-known/acme-challenge/ {
allow all;
# Set correct content type.