docs: add Docker certbot instructions

Part-of: <https://dev.funkwhale.audio/funkwhale/funkwhale/-/merge_requests/2319>
environments/review-docs-2033-9kqtxl/deployments/16633
Ciarán Ainsworth 2023-01-17 10:09:56 +01:00
rodzic 59893a2232
commit c483a25e3b
1 zmienionych plików z 7 dodań i 27 usunięć

Wyświetl plik

@ -262,39 +262,19 @@ That's it! The container mounts your custom nginx files and uses its values to s
## 6. Set up TLS ## 6. Set up TLS
To enable your users to connect to your pod securely, you need to set up {abbr}`TLS (Transport Layer Security)`. To do this, we recommend using the <acme.sh> script. To enable your users to connect to your pod securely, you need to set up {abbr}`TLS (Transport Layer Security)`. To do this, we recommend using [certbot](https://certbot.eff.org/).
1. Log in as the superuser account to run these commands. 1. Install certbot
```{code-block} sh ```{code-block} sh
su apt-get update
apt-get install certbot python3-certbot-nginx
``` ```
2. Create the `/etc/certs` folder to store the certificates. 2. Run certbot
```{code-block} sh ```{code-block} sh
mkdir /etc/certs sudo certbot --nginx -d $FUNKWHALE_HOSTNAME
``` ```
3. Download and run `acme.sh`. Replace `my@example.com` with your email address. That's it! certbot renews your certificate every 60 days, so you don't need to worry about renewing it.
```{code-block} sh
curl https://get.acme.sh | sh -s email=my@example.com
```
4. Generate a certificate. Replace `example.com` with your Funkwhale pod name. Use `/srv/funkwhale/front` as your web root folder.
```{code-block} sh
acme.sh --issue -d example.com -w /srv/funkwhale/front
```
5. Install the certificate to your Nginx config. Replace `example.com` with your Funkwhale pod name.
```{code-block} sh
acme.sh --install-cert -d example.com \
--key-file /etc/certs/key.pem \
--fullchain-file /etc/certs/cert.pem \
--reloadcmd "service nginx force-reload"
```
That's it! acme.sh renews your certificate every 60 days, so you don't need to worry about renewing it.