| Ambdós costats versió prèvia Revisió prèvia Següent revisió | Revisió prèvia |
| web:security:letsencrypt:wildcard [22/07/2026 15:35] – [renovación autmatizada auth.acme-dns.io] mate | web:security:letsencrypt:wildcard [25/09/2026 14:17] (actual) – mate |
|---|
| sudo chmod +x /etc/letsencrypt/acme-dns-auth.py | sudo chmod +x /etc/letsencrypt/acme-dns-auth.py |
| sudo certbot certonly --manual --manual-auth-hook /etc/letsencrypt/acme-dns-auth.py --preferred-challenges dns --debug-challenges -d "*.fidmag.org" -d "fidmag.org"</code> | sudo certbot certonly --manual --manual-auth-hook /etc/letsencrypt/acme-dns-auth.py --preferred-challenges dns --debug-challenges -d "*.fidmag.org" -d "fidmag.org"</code> |
| * creat registre CNAME:<code>_acme-challenge.fidmag.org CNAME 1569f935-7bf3-4630-9c3d-5846ad7c956e.auth.acme-dns.io.</code><code bash>dig _acme-challenge.fidmag.org CNAME +short</code> | * creat registre CNAME:<code>_acme-challenge.fidmag.org CNAME 1569f935-7bf3-4630-9c3d-123456789abc.auth.acme-dns.io.</code><code bash>dig _acme-challenge.fidmag.org CNAME +short</code> |
| * renovacions per cron<code bash>0 7,19 * * * certbot renew --quiet --deploy-hook "/home/fidmag/certbot/renew-dns.sh" > /home/fidmag/certbot/last_exec 2>&1 | * renovacions per cron<code bash>0 7,19 * * * certbot renew --quiet --deploy-hook "/home/fidmag/certbot/renew-dns.sh" > /home/fidmag/certbot/last_exec 2>&1 |
| </code> | </code> |
| * simulacro: <code bash>certbot renew --dry-run</code> | * simulacro: <code bash>certbot renew --dry-run</code> |
| * comprobar fichero configuración renovación:<code ini /etc/letsencrypt/renewal/fidmag.org-0001.conf># Options used in the renewal process | * comprobar fichero configuración renovación:<code ini /etc/letsencrypt/renewal/fidmag.org.conf># Options used in the renewal process |
| [renewalparams] | [renewalparams] |
| account = *** | account = *** |
| * ''%%--%%deploy-hook'': script a ejecutar si la renovación es exitosa | * ''%%--%%deploy-hook'': script a ejecutar si la renovación es exitosa |
| * <code bash certificats.config># configuració | * <code bash certificats.config># configuració |
| declare -a CERTIFICATS=("matebcn.eu" "fruitsmontmany.es" "estellar.cat")</code><code bash>#!/usr/bin/env bash | #declare -a CERTIFICATS=("matebcn.eu" "fruitsmontmany.es" "estellar.cat") |
| | declare -a CERTIFICATS=($(basename -s .conf /etc/letsencrypt/renewal/*.conf))</code><code bash>#!/usr/bin/env bash |
| |
| SCRIPT_SOURCE=`dirname "$0"` | SCRIPT_SOURCE=`dirname "$0"` |
| done</code> | done</code> |
| |
| == cli | |
| <code bash>sudo certbot certonly --manual --preferred-challenges=dns --email informatica@fidmag.org --server https://acme-v02.api.letsencrypt.org/directory --agree-tos -d *.fidmag.org</code> | |
| <code bash>sudo certbot certificates</code> | |
| <code bash>sudo certbot delete --cert-name <CERT_NAME></code> | |