Use host ports 3006/8005 and 3096/8096 so Kansho does not collide with Bookstack on 3005 or the sister products. Co-authored-by: Cursor <cursoragent@cursor.com>
24 lines
596 B
Bash
24 lines
596 B
Bash
#!/bin/bash
|
|
# Let's Encrypt for kansho.jinkendo.de and dev.kansho.jinkendo.de
|
|
# Prerequisites: host nginx installed, ports 80/443 reachable, DNS A/AAAA in place.
|
|
|
|
set -e
|
|
|
|
EMAIL="${CERTBOT_EMAIL:-lars@stommer.de}"
|
|
|
|
echo "=== Let's Encrypt for Kanshō ==="
|
|
|
|
sudo apt-get update
|
|
sudo apt-get install -y certbot python3-certbot-nginx
|
|
|
|
sudo certbot --nginx \
|
|
-d kansho.jinkendo.de \
|
|
-d dev.kansho.jinkendo.de \
|
|
--email "$EMAIL" \
|
|
--agree-tos \
|
|
--non-interactive \
|
|
--redirect
|
|
|
|
echo "Check renewal: sudo certbot renew --dry-run"
|
|
echo "Timer: sudo systemctl status certbot.timer"
|