Jeremy Dormitzer
0f70f43090
Squashed commit of the following: commit8371367d54Author: Jeremy Dormitzer <jeremy.dormitzer@gmail.com> Date: Tue Mar 8 11:56:39 2022 -0500 Ensure that nginx restarts after cert renewal commitf2ef1ba9f2Author: Jeremy Dormitzer <jeremydormitzer@lola.com> Date: Tue Oct 5 21:16:44 2021 -0400 Put syncthing behind nginx commit6c10b1bb97Author: Jeremy Dormitzer <jeremydormitzer@lola.com> Date: Tue Oct 5 17:45:53 2021 -0400 Put wallabag behind nginx proxy commitdd29785d86Author: Jeremy Dormitzer <jeremydormitzer@lola.com> Date: Mon Oct 4 17:30:46 2021 -0400 Put gitea behind the nginx proxy commit2d82c0ad54Author: Jeremy Dormitzer <jeremydormitzer@lola.com> Date: Mon Oct 4 13:36:37 2021 -0400 Add terraform outputs and spin up nginx droplet commit322449a194Author: Jeremy Dormitzer <jeremydormitzer@lola.com> Date: Mon Oct 4 13:29:59 2021 -0400 Finish packer build for nginx proxy commitaec886064aAuthor: Jeremy Dormitzer <jeremydormitzer@lola.com> Date: Mon Oct 4 09:28:06 2021 -0400 [WIP] Add actual server values to nginx conf commit2c645d94c6Author: Jeremy Dormitzer <jeremydormitzer@lola.com> Date: Mon Oct 4 09:06:02 2021 -0400 [WIP] Use terraform to generate nginx conf file commit61ebc3d7afAuthor: Jeremy Dormitzer <jeremydormitzer@lola.com> Date: Mon Oct 4 09:04:56 2021 -0400 Ignore all tmp directories commite3feb6d3f7Author: Jeremy Dormitzer <jeremydormitzer@lola.com> Date: Sun Oct 3 12:32:42 2021 -0400 [WIP] Begin adding packer config for centralized ssl termination
30 lines
822 B
Bash
30 lines
822 B
Bash
#!/usr/bin/env bash
|
|
|
|
set -xe
|
|
|
|
sudo mv /tmp/do.ini ~/do.ini
|
|
sudo certbot certonly \
|
|
-n \
|
|
--agree-tos \
|
|
-m 'jeremy.dormitzer@gmail.com' \
|
|
--dns-digitalocean \
|
|
--dns-digitalocean-credentials ~/do.ini \
|
|
--dns-digitalocean-propagation-seconds 30 \
|
|
-d '*.jeremydormitzer.com' \
|
|
-d 'jeremydormitzer.com'
|
|
|
|
sudo mv /tmp/nginx.conf /etc/nginx/nginx.conf
|
|
sudo mkdir -p /var/log/nginx
|
|
sudo systemctl enable nginx
|
|
|
|
sudo mv /tmp/certbot-renew.timer /etc/systemd/system/
|
|
sudo mv /tmp/certbot-renew.service /etc/systemd/system/
|
|
sudo systemctl enable certbot-renew.timer
|
|
|
|
sudo mv /tmp/nginx-restart.timer /etc/systemd/system/
|
|
sudo mv /tmp/nginx-restart.service /etc/systemd/system/
|
|
sudo systemctl enable nginx-restart.timer
|
|
|
|
sudo mv /tmp/sshd_config /etc/ssh/sshd_config
|
|
sudo systemctl restart sshd
|