From 0fef14ddc3732b5022be61b7bdc0e11de559d17e Mon Sep 17 00:00:00 2001 From: Fernando Miguel Date: Fri, 30 Sep 2016 10:05:01 +0100 Subject: [PATCH] Updated Synology RT1900ac install guide (markdown) --- Synology-RT1900ac-install-guide.md | 19 +++++++++---------- 1 file changed, 9 insertions(+), 10 deletions(-) diff --git a/Synology-RT1900ac-install-guide.md b/Synology-RT1900ac-install-guide.md index c48b906..ec6d640 100644 --- a/Synology-RT1900ac-install-guide.md +++ b/Synology-RT1900ac-install-guide.md @@ -8,27 +8,26 @@ I've also used it with DNS01 protocol, which means, I don't have any ports open Since the Router shell is very limited, there are several constraints. the most important of all, there is no cron/crontab. trying the default install -$ wget -O - https://get.acme.sh | sh +`$ wget -O - https://get.acme.sh | sh` , will fail cause of cron. so we have to do it manually -$ wget https://github.com/Neilpang/acme.sh/archive/master.tar.gz -$ tar xvf master.tar.gz -$ cd acme.sh-master/ -$ ./acme.sh --install --nocron +`$ wget https://github.com/Neilpang/acme.sh/archive/master.tar.gz` +`$ tar xvf master.tar.gz` +`$ cd acme.sh-master/` +`$ ./acme.sh --install --nocron` so install is done :) next, config -$ cd ~/.acme.sh/ -$ vi acme.sh account.conf +`$ cd ~/.acme.sh/` +`$ vi acme.sh account.conf ` set your email, cloudflare account and API (https://www.cloudflare.com/a/account/my-account) ctrl+c :wq (and you are out of VI(M) now to create your cert -$ ./acme.sh --issue -d YOURDOMAIN.TLD --dns dns_cf --certpath /usr/syno/etc/ssl/ssl.crt/server.crt --keypath /usr/syno/etc/ssl/ssl.key/server.key --fullchainpath / -usr/syno/etc/ssl/ssl.intercrt/server-ca.crt +`$ ./acme.sh --issue -d YOURDOMAIN.TLD --dns dns_cf --certpath /usr/syno/etc/ssl/ssl.crt/server.crt --keypath /usr/syno/etc/ssl/ssl.key/server.key --fullchainpath /usr/syno/etc/ssl/ssl.intercrt/server-ca.crt` (anyone knows how to restart the webserver?) simple right? @@ -36,7 +35,7 @@ simple right? since there is no cron, the renewal still requires manual work. I've added this line at the bottom of /etc/rc and ~/.profile -/root/.acme.sh/acme.sh --cron +`/root/.acme.sh/acme.sh --cron` so when the router is rebooted or you ssh into it, it tries to renew the cert. HTH \ No newline at end of file