2018-11-20 13:12:25 +00:00
|
|
|
|
<!-- ✔ modularized --><span ng-if="isModularized()"><!--
|
|
|
|
|
|
|
|
|
|
--><span class="hljs-comment"># <strong>Virtual host</strong>: create symbolic link</span>
|
|
|
|
|
<span class="hljs-section">ln</span> <span class="hljs-attribute">-s</span> /etc/nginx/sites-available/{{ domain() }}.conf /etc/nginx/sites-enabled/{{ domain() }}.conf</span><!--
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
✔ modularized || ✔ HTTPS --><span ng-if="isModularized() && ((isHTTPS() && !isSSLProfileModern()) || isCertLetsEncrypt())">
|
|
|
|
|
|
|
|
|
|
</span><!--
|
|
|
|
|
|
|
|
|
|
|
2018-03-10 12:39:05 +00:00
|
|
|
|
✔ HTTPS --><span ng-if="isHTTPS() && !isSSLProfileModern()"><!--
|
2018-02-21 00:54:13 +00:00
|
|
|
|
|
|
|
|
|
--><span class="hljs-comment"># <strong>HTTPS</strong>: create Diffie-Hellman keys</span>
|
2018-03-10 12:39:05 +00:00
|
|
|
|
<span class="hljs-section">openssl dhparam</span> <span class="hljs-attribute">-dsaparam</span> <span class="hljs-attribute">-out</span> /etc/nginx/dhparam.pem <span class="hljs-number">{{ isSSLProfileOld() ? 1024 : 2048 }}</span><!--
|
2018-02-18 13:02:11 +00:00
|
|
|
|
|
2018-03-10 12:39:05 +00:00
|
|
|
|
--><span ng-if="isCertLetsEncrypt()">
|
2018-02-21 00:54:13 +00:00
|
|
|
|
|
2018-03-10 12:39:05 +00:00
|
|
|
|
</span></span><!--
|
2018-02-21 00:54:13 +00:00
|
|
|
|
|
2018-02-18 13:02:11 +00:00
|
|
|
|
|
2018-03-10 12:39:05 +00:00
|
|
|
|
✔ Let's Encrypt --><span ng-if="isCertLetsEncrypt()"><!--
|
|
|
|
|
--><span class="hljs-comment"># <strong>HTTPS</strong>: create ACME-challenge common directory</span>
|
2018-02-18 13:02:11 +00:00
|
|
|
|
<span class="hljs-section">sudo</span> <span class="hljs-attribute">-u</span> {{ data.user }} <span class="hljs-section">sh</span> <span class="hljs-attribute">-c</span> "<span class="hljs-section">mkdir</span> <span class="hljs-attribute">-p</span> /var/www/_letsencrypt"
|
|
|
|
|
|
2018-12-01 16:41:54 +00:00
|
|
|
|
<span class="hljs-comment"># <strong>HTTPS</strong>: certbot (obtain certificates)<br># disable before first run: <strong>listen</strong>, <strong>ssl_certificate</strong>, <strong>ssl_certificate_key</strong>, <strong>ssl_trusted_certificate</strong> in HTTPS server</span>
|
2018-03-10 11:33:23 +00:00
|
|
|
|
<span class="hljs-section">certbot certonly</span> <!--
|
|
|
|
|
--><span class="hljs-attribute">--webroot</span> <!--
|
|
|
|
|
--><span ng-if="isNonWWW() || isRedirect()"><span class="hljs-attribute" tooltips tooltip-template="--domain">-d</span> {{ domain() }} </span><!--
|
|
|
|
|
--><span ng-if="isWWW() || isRedirect()"><span class="hljs-attribute" tooltips tooltip-template="--domain">-d</span> www.{{ domain() }} </span><!--
|
|
|
|
|
--><span ng-if="isCDN()"><span class="hljs-attribute" tooltips tooltip-template="--domain">-d</span> cdn.{{ domain() }} </span><!--
|
2018-08-28 19:57:21 +00:00
|
|
|
|
--><span class="hljs-attribute">--email</span> {{ data.email ? data.email : 'info@' + domain() }} <!--
|
2018-03-10 11:33:23 +00:00
|
|
|
|
--><span class="hljs-attribute" tooltips tooltip-template="--webroot-path">-w</span> /var/www/_letsencrypt <!--
|
|
|
|
|
--><span class="hljs-attribute" tooltips tooltip-template="--non-interactive">-n</span> <!--
|
|
|
|
|
--><span class="hljs-attribute">--agree-tos</span> <!--
|
|
|
|
|
--><span class="hljs-attribute">--force-renewal</span><!--
|
2018-02-21 00:54:13 +00:00
|
|
|
|
|
2018-06-11 22:41:57 +00:00
|
|
|
|
--></span>
|