You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Brielle Bruns 7c6cfd1fab Updates to gen-cert.sh to make it more foolproof. 4 years ago
cron Add example weekly cron script 4 years ago
CHANGELOG Updates to gen-cert.sh to make it more foolproof. 4 years ago
DSTROOTCAX3.txt Initial import 4 years ago
LICENSE Add license 4 years ago
README.md Updating readme 4 years ago
apache-le-alias.conf Initial import 4 years ago
apache-le-proxy.conf Initial import 4 years ago
gen-cert.sh Updates to gen-cert.sh to make it more foolproof. 4 years ago
gen-unifi-cert.sh Minor changes to gen-unifi-cert.sh 4 years ago
get-letsencrypt.sh Fixing a few things... 4 years ago

README.md

Lets Encrypt Scripts

Public Git URL: https://source.sosdg.org/brielle/lets-encrypt-scripts

By: Brielle Bruns bruns@2mbit.com

These are various scripts to make LetsEncrypt easier to use.

Files

Main Scripts

gen-cert.sh - Main script to make it easy to generate LE certs for domain(s)

gen-unifi-cert.sh - Script to add LE cert to a Unifi controller

Support Files

DSTROOTCAX3.txt - Root CA cert for use with the gen-unifi-cert.sh script (now optional and unneeded as the cert is embedded)

apache-le-alias.conf - Use with apache for LE well-known alias config

apache-le-proxy.conf - Use with apache for LE well-known proxy config

How To Use

gen-unifi-cert.sh

  1. Do initial cert generation:

     gen-unifi-cert.sh -e email@address.com -d unifi.somedomain.com -d unifi.someotherdomain.com
    
  2. Put in /etc/cron.weekly/renew-unifi-ssl if everything works okay:

     /path/to/script/gen-unifi-cert.sh -r -d unifi.somedomain.com -d unifi.someotherdomain.com
    
  3. Script will now run weekly and renew the certificate if necessary ( < 30 days remain) and restart unifi only if cert has been renewed.