Davrot@uni-bremen.de: /* First time run of certbot */

2026-04-17T16:54:37Z

First time run of certbot

← Older revision		Revision as of 16:54, 17 April 2026
Line 48:		Line 48:
	Key ID, HMAC Key, Server URL from <nowiki>https://cm.harica.gr/Acme</nowiki> via Academic Login		Key ID, HMAC Key, Server URL from <nowiki>https://cm.harica.gr/Acme</nowiki> via Academic Login

	Obviously, use your domain...<syntaxhighlight lang="bash">		Obviously, use your domain... You can add more domain names but the http needs to be able to resolve the DNS names <syntaxhighlight lang="bash">
	certbot certonly \		certbot certonly \
	--webroot \		--webroot \

Davrot@uni-bremen.de: /* Reload the changes settings */

2026-04-17T14:33:15Z

Reload the changes settings

@@ Line 79: / Line 79: @@
 cd /docker/compose_cep/nginx
 docker compose up -d nginx
 </syntaxhighlight>

Davrot@uni-bremen.de: Created page with "== Pre-Challenge Phase == === Make the challenge dir === mkdir -p /var/www/acme/.well-known/acme-challenge === Change the nginx.conf for the challenge === Port 80 block http { server { listen 80 default_server; listen [::]:80 default_server; server_name _; # ACME challenge — must come before the redirect location /.well-known/acme-challenge/ {..."

2026-04-17T14:30:48Z

Created page with "== Pre-Challenge Phase == === Make the challenge dir === <syntaxhighlight lang="bash"> mkdir -p /var/www/acme/.well-known/acme-challenge </syntaxhighlight> === Change the nginx.conf for the challenge === Port 80 block<syntaxhighlight lang="bash"> http { server { listen 80 default_server; listen [::]:80 default_server; server_name _; # ACME challenge — must come before the redirect location /.well-known/acme-challenge/ {..."

New page

== Pre-Challenge Phase ==

=== Make the challenge dir ===
<syntaxhighlight lang="bash">
mkdir -p /var/www/acme/.well-known/acme-challenge
</syntaxhighlight>

=== Change the nginx.conf for the challenge ===
Port 80 block<syntaxhighlight lang="bash">
http {
server {
listen 80 default_server;
listen [::]:80 default_server;
server_name _;
# ACME challenge — must come before the redirect
location /.well-known/acme-challenge/ {
root /var/www/acme;
}
# Everything else redirects to HTTPS
location / {
return 301 https://$host$request_uri;
}
}
</syntaxhighlight>

=== Add the challenge dir to the nginx compose file ===
<syntaxhighlight lang="bash">
volumes:
- "./nginx.conf:/etc/nginx/nginx.conf:ro"
- "./key.pem:/certs/key.pem:ro"
- "./ca.pem:/certs/ca.pem:ro"
- "/var/www/acme:/var/www/acme:ro" # <-- add this
</syntaxhighlight>

=== Reload the changed nginx compose settings ===
<syntaxhighlight lang="bash">
# Use your dir and container name
cd /docker/compose_cep/nginx
docker compose up -d nginx
</syntaxhighlight>

=== Install certbot ===
<syntaxhighlight lang="bash">
apt -y install certbot
</syntaxhighlight>

=== First time run of certbot ===
Key ID, HMAC Key, Server URL from <nowiki>https://cm.harica.gr/Acme</nowiki> via Academic Login

Obviously, use your domain...<syntaxhighlight lang="bash">
certbot certonly \
--webroot \
--webroot-path /var/www/acme \
--non-interactive \
--agree-tos \
--email <your-email> \
--eab-kid <Key ID> \
--eab-hmac-key <HMAC Key> \
--server <Server URL> \
--domain overleaf.pip.uni-bremen.de
</syntaxhighlight>

== Post-Challenge Phase ==

=== Switch to the new certificates in the nginx compose file ===
<syntaxhighlight lang="bash">
volumes:
- "./nginx.conf:/etc/nginx/nginx.conf:ro"
# - "./key.pem:/certs/key.pem:ro"
# - "./ca.pem:/certs/ca.pem:ro"
- "/etc/letsencrypt/live/overleaf.pip.uni-bremen.de/fullchain.pem:/certs/ca.pem:ro"
- "/etc/letsencrypt/live/overleaf.pip.uni-bremen.de/privkey.pem:/certs/key.pem:ro"
- "/var/www/acme:/var/www/acme:ro"
</syntaxhighlight>

=== Reload the changes settings ===
<syntaxhighlight lang="bash">
# Use your dir and container name
cd /docker/compose_cep/nginx
docker compose up -d nginx
</syntaxhighlight>

AMCE SSL - Revision history

Davrot@uni-bremen.de: /* First time run of certbot */

Davrot@uni-bremen.de: /* Reload the changes settings */