24 lines
566 B
Markdown
24 lines
566 B
Markdown
|
# [PoC] Certbot + Angie
|
||
|
|
|
||
|
|
## goals
|
||
|
|
|
||
|
|
- improve Angie support [ssl_stapling_file](https://angie.software/en/configuration/modules/http_ssl/#ssl-stapling-file)
|
||
|
|
|
||
|
|
## quick start
|
||
|
|
|
||
|
|
```sh
|
||
|
|
# create venv for Certbot
|
||
|
|
certbot-venv pip install certbot
|
||
|
|
|
||
|
|
# here goes your certbot configuration
|
||
|
|
# ref: https://eff-certbot.readthedocs.io/en/stable/intro.html
|
||
|
|
|
||
|
|
# - discover new systemd units
|
||
|
|
# - enable override for angie.service
|
||
|
|
systemctl daemon-reload
|
||
|
|
|
||
|
|
# enable new systemd units
|
||
|
|
systemctl enable certbot{,-ocsp-angie}.{service,timer}
|
||
|
|
systemctl start certbot{,-ocsp-angie}.timer
|
||
|
|
```
|