Skip to content

Instantly share code, notes, and snippets.

@good-vi

good-vi/letsencrypt-proxmox.md

Forked from lichti/letsencrypt-proxmox.md
Last active September 8, 2021 13:24
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save good-vi/e2e523326b5bd7e3f141ccad7f4ca6de to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save good-vi/e2e523326b5bd7e3f141ccad7f4ca6de to your computer and use it in GitHub Desktop.
Download ZIP
Proxmox with letsencrypt ssl updated by 2021
Raw
letsencrypt-proxmox.md 
apt update && apt install certbot

use STANDALONE validation on 80 port (should be open)

# lowercase
DOMAIN_NAME=xxx.com.br
EMAIL=meu-email@gmail.com

certbot certonly --expand --agree-tos --text --non-interactive \
  --standalone \
  --email $EMAIL \
  -d $DOMAIN_NAME

cat << EOF > /usr/local/bin/renew-pve-certs.sh
#!/bin/bash
# backup old certs
mv /etc/pve/local/pveproxy-ssl.pem /etc/pve/local/pve-ssl.pem.bak
mv /etc/pve/local/pveproxy-ssl.key /etc/pve/local/pveproxy-ssl.key.bak

cp /etc/letsencrypt/live/$DOMAIN_NAME/fullchain.pem /etc/pve/local/pveproxy-ssl.pem
cp /etc/letsencrypt/live/$DOMAIN_NAME/privkey.pem /etc/pve/local/pveproxy-ssl.key

systemctl restart pveproxy 
EOF

chmod +x /usr/local/bin/renew-pve-certs.sh

echo "30 6 1,15 * * root /usr/bin/certbot renew --quiet --post-hook /usr/local/bin/renew-pve-certs.sh" > /etc/cron.d/letsencrypt

/usr/local/bin/renew-pve-certs.sh
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment