LetsEncrypt

Installation

Debian 8

echo 'deb http://ftp.debian.org/debian jessie-backports main' | sudo tee /etc/apt/sources.list.d/backports.list
apt-get update
apt-get install certbot -t jessie-backports

nginx-Konfiguration

Wichtig: muss schon unter HTTPS laufen

• /etc/nginx/sites-enabled/default

location ~ /.well-known {
                allow all;
        }

URL=wiki.hamatoma.de
ROOT=/var/www/html
test -d $ROOT || mkdir $ROOT/.well-known && chmod uog+rwx $ROOT/.well-known
systemctl reload nginx
certbot certonly -a webroot --webroot-path=$ROOT -d $URL -d www.$URL

Einbinden des Zerifikats

        ssl_certificate /etc/letsencrypt/live/wiki.hamatoma.de/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/wiki.hamatoma.de/privkey.pem;