Howto renew Lets Encrypt certs

From Meta Makers Wiki
Jump to: navigation, search

to renew the Let's Encrypt certs for M2C websites, do the following

  1. ssh to wiki.metamakers.org
  2. run the following commands:
cd /opt/dehydrated
sudo ./dehydrated --cron

All new certs get generated under the /opt/dehydrated/certs/ directory. Each subdirectory here corresponds to an LE cert. All of the necessary cert files are in each subdirectory. If the dehydrated script generates any new certs, you'll have to copy them to the right spots for these particular servers:

wiki.metamakers.org
You don't have to do anything for this one, apache is already configured to point directly to the dehydrated certificate path
mail.metamakers.org
You'll have to copy the contents of /opt/dehydrated/certs/mail.metamakers.org/ on the wiki server to /etc/postfix/certs/mail.metamakers.org/ on the mail server.
www.metamakers.org
this one's not used because github provides its own SSL certs. It's just listed here for historical purposes.