From 28a328ca9d61e5f351c6e18be412177921e1d60a Mon Sep 17 00:00:00 2001 From: Georg Krause Date: Tue, 17 Jan 2023 08:40:12 +0100 Subject: [PATCH] docs: Instruct users to setup TLS using certbot Part-of: --- .../installation_docs/debian.md | 28 +++++-------------- 1 file changed, 7 insertions(+), 21 deletions(-) diff --git a/docs/administrator_documentation/installation_docs/debian.md b/docs/administrator_documentation/installation_docs/debian.md index 65782058a..3dc15e82a 100644 --- a/docs/administrator_documentation/installation_docs/debian.md +++ b/docs/administrator_documentation/installation_docs/debian.md @@ -361,33 +361,19 @@ grep '${' /etc/nginx/sites-enabled/funkwhale.conf ## 10. Set up TLS -To enable your users to connect to your pod securely, you need to set up {abbr}`TLS (Transport Layer Security)`. To do this, we recommend using the script. +To enable your users to connect to your pod securely, you need to set up {abbr}`TLS (Transport Layer Security)`. To do this, we recommend using certbot. -1. Create the `/etc/certs` folder to store the certificates. +1. Install certbot ```{code-block} sh - sudo mkdir /etc/certs + apt-get update + apt-get install certbot python3-certbot-nginx ``` -2. Download and run `acme.sh`. Replace `my@example.com` with your email address. +2. Run certbot ```{code-block} sh - curl https://get.acme.sh | sudo sh -s email=my@example.com + sudo certbot --nginx -d $FUNKWHALE_HOSTNAME ``` -3. Generate a certificate. Replace `example.com` with your Funkwhale pod name. Use `/srv/funkwhale/front` as your web root folder. - - ```{code-block} sh - sudo acme.sh --issue -d example.com -w /srv/funkwhale/front - ``` - -4. Install the certificate to your Nginx config. Replace `example.com` with your Funkwhale pod name. - - ```{code-block} sh - sudo acme.sh --install-cert -d example.com \ - --key-file /etc/certs/key.pem \ - --fullchain-file /etc/certs/cert.pem \ - --reloadcmd "service nginx force-reload" - ``` - -That's it! acme.sh renews your certificate every 60 days, so you don't need to about renewing it. +That's it! certbot renews your certificate every 60 days, so you don't need to worry about renewing it.