Provision nginx and letsencrypt

davewsmith / homelab

Dave's disaster of a homelab

The Unlicense

0 stars 0 forks source link

Open davewsmith opened 10 months ago

davewsmith commented 10 months ago

Assuming tailscale configured

get a letsencrypt cert and put it somewhere (/etc/ssl/private ?)
set up a cron or systemd job to refresh the cert. https://blog.viktorpetersson.com/2022/12/23/securing-services-with-tailscale.html has a recipe.
install nginx if needed
emplace an nginx enabled-site that uses the cert and shunts http: to https:
drop in placeholder HTML (if needed)
restart nginx if needed

A config for uwsgi is out of scope.

davewsmith commented 10 months ago

Blocked by #10

davewsmith commented 7 months ago

Adapted https://sleeplessbeastie.eu/2023/02/20/how-to-use-tailscale-to-generate-certificate/ to auto-renew the cert on pinot. It checks weekly, and puts certs in /etc/nginx/