certbot

  1. https://certbot.eff.org/instructions?ws=nginx&os=debianbuster
  2. include snippets/letsencrypt-acme-challenge.conf;
  3. certbot --nginx --expand --redirect  --cert-name bubuit.net -d DOM.TLD,SUBDOM.DOM.TLD
    1. # KEIN ABSTAND KOMMA

 

Tags
certbot
security

letsencrypt acme challenge

/etc/nginx/snippets/letsencrypt-acme-challenge.conf

# We use ^~ here, so that we don't check other regexes (for speed-up). We actually MUST cancel
# other regex checks, because in our other config files have regex rule that denies access to files with dotted names.
location ^~ /.well-known/acme-challenge/ {
    allow all;
   # Set correct content type.
Tags
certbot