| Ambdós costats versió prèvia Revisió prèvia Següent revisió | Revisió prèvia |
| web:security:letsencrypt:wildcard [24/07/2026 14:57] – [cli] mate | web:security:letsencrypt:wildcard [25/09/2026 14:17] (actual) – mate |
|---|
| sudo chmod +x /etc/letsencrypt/acme-dns-auth.py | sudo chmod +x /etc/letsencrypt/acme-dns-auth.py |
| sudo certbot certonly --manual --manual-auth-hook /etc/letsencrypt/acme-dns-auth.py --preferred-challenges dns --debug-challenges -d "*.fidmag.org" -d "fidmag.org"</code> | sudo certbot certonly --manual --manual-auth-hook /etc/letsencrypt/acme-dns-auth.py --preferred-challenges dns --debug-challenges -d "*.fidmag.org" -d "fidmag.org"</code> |
| * creat registre CNAME:<code>_acme-challenge.fidmag.org CNAME 1569f935-7bf3-4630-9c3d-5846ad7c956e.auth.acme-dns.io.</code><code bash>dig _acme-challenge.fidmag.org CNAME +short</code> | * creat registre CNAME:<code>_acme-challenge.fidmag.org CNAME 1569f935-7bf3-4630-9c3d-123456789abc.auth.acme-dns.io.</code><code bash>dig _acme-challenge.fidmag.org CNAME +short</code> |
| * renovacions per cron<code bash>0 7,19 * * * certbot renew --quiet --deploy-hook "/home/fidmag/certbot/renew-dns.sh" > /home/fidmag/certbot/last_exec 2>&1 | * renovacions per cron<code bash>0 7,19 * * * certbot renew --quiet --deploy-hook "/home/fidmag/certbot/renew-dns.sh" > /home/fidmag/certbot/last_exec 2>&1 |
| </code> | </code> |
| * simulacro: <code bash>certbot renew --dry-run</code> | * simulacro: <code bash>certbot renew --dry-run</code> |
| * comprobar fichero configuración renovación:<code ini /etc/letsencrypt/renewal/fidmag.org-0001.conf># Options used in the renewal process | * comprobar fichero configuración renovación:<code ini /etc/letsencrypt/renewal/fidmag.org.conf># Options used in the renewal process |
| [renewalparams] | [renewalparams] |
| account = *** | account = *** |
| * ''%%--%%deploy-hook'': script a ejecutar si la renovación es exitosa | * ''%%--%%deploy-hook'': script a ejecutar si la renovación es exitosa |
| * <code bash certificats.config># configuració | * <code bash certificats.config># configuració |
| declare -a CERTIFICATS=("matebcn.eu" "fruitsmontmany.es" "estellar.cat")</code><code bash>#!/usr/bin/env bash | #declare -a CERTIFICATS=("matebcn.eu" "fruitsmontmany.es" "estellar.cat") |
| | declare -a CERTIFICATS=($(basename -s .conf /etc/letsencrypt/renewal/*.conf))</code><code bash>#!/usr/bin/env bash |
| |
| SCRIPT_SOURCE=`dirname "$0"` | SCRIPT_SOURCE=`dirname "$0"` |