Add letsencript SSL signing to GVL auto config

[AndrewIsaac]

Really a GVL deployment issue Ben did the following to get SSL certs (RT#24819), need to automate.

• installed letsencrypt (apt install letsencrypt)
• generated a new cert that works for {www.,}genome.edu.au {www.,}gvl.org.au
• updated nginx config to use the newly generated key and cert
• added a renewal script at /usr/local/bin/renew_letsencrypt_cert
• scheduled daily run of renewal script

After talking to Simon, I also added 301 redirects to:

• encrypt all traffic
• send all traffic to the canonical hostname, www.gvl.org.au

[AndrewIsaac]

Noticed that GVL's are not using https, is this related?

[nuwang]

Thanks, this is very useful. There is an option to enable https in cloudman, but that generates a self-signed certificate. As a result, you get warning about it not being trusted on first login. letsencrypt should solve that problem.