X-Git-Url: https://iankelling.org/git/?p=basic-https-conf;a=blobdiff_plain;f=web-conf;h=4dc3974f38d4dc04f79593268c69562d8b2e8bf8;hp=08d1c047f2bd649da80745acc075af18359a10a2;hb=452c9b3203296546a1ae6c21fa4de5701a73f82a;hpb=43857c512f612e094ae9fe49c47892f0ba1abd30 diff --git a/web-conf b/web-conf index 08d1c04..4dc3974 100755 --- a/web-conf +++ b/web-conf @@ -25,7 +25,11 @@ usage() { Usage: ${0##*/} [OPTIONS] [EXTRA_SETTINGS_FILE] apache2|nginx DOMAIN apache/nginx config & let's encrypt -If using tls then it expects certbot to be installed and in PATH. +If using tls then it expects certbot to be installed and in PATH. Also, +certbot cronjob should be taken care of outside this script. In the +debian package, it installs a systemd timer, which I (Ian Kelling) use +and modify to email me on failure. You can see how I do this in my git +repo distro-setup, and log-quiet. EXTRA_SETTINGS_FILE can be - for stdin @@ -115,7 +119,7 @@ if $ssl; then # when generating an example config, add all relevant security options: # --hsts --staple-ocsp --uir certbot certonly -n --must-staple --email $email --no-self-upgrade \ - --agree-tos --$t -d $h + --agree-tos --${t%2} -d $h rm $vhost_file fi fi