wiki/info/landscape/sail-insight.com-website.md
... ...
@@ -4,11 +4,15 @@ The sail-insight micro site is hosted statically in `/home/trac/sail-insight-web
4 4
5 5
The SSL certificate is provided by LetsEncrypt. Since `certbot` is not available on Amazon AMI Linux a docker container with symlinks to the three relevant folders is spun up to obtain the SSL certificates:
6 6
7
-`docker run -it --rm --name certbot -v "/etc/letsencrypt:/etc/letsencrypt" -v "/var/lib/letsencrypt:/var/lib/letsencrypt" -v "/home/trac/sail-insight-website/:/home/trac/sail-insight-website" certbot/certbot certonly`
7
+```
8
+docker run -it --rm --name certbot -v "/etc/letsencrypt:/etc/letsencrypt" -v "/var/lib/letsencrypt:/var/lib/letsencrypt" -v "/home/trac/sail-insight-website/:/home/trac/sail-insight-website" certbot/certbot certonly
9
+```
8 10
9 11
The same docker container is spun up once a week to check whether the certificate needs renewing:
10 12
11
-`docker run -it --rm --name certbot -v "/etc/letsencrypt:/etc/letsencrypt" -v "/var/lib/letsencrypt:/var/lib/letsencrypt" -v "/home/trac/sail-insight-website/:/home/trac/sail-insight-website" certbot/certbot renew`
13
+```
14
+docker run -it --rm --name certbot -v "/etc/letsencrypt:/etc/letsencrypt" -v "/var/lib/letsencrypt:/var/lib/letsencrypt" -v "/home/trac/sail-insight-website/:/home/trac/sail-insight-website" certbot/certbot renew
15
+```
12 16
13 17
The docker container should delete itself after it ran. (`--rm` flag)
14 18
... ...
@@ -18,8 +22,10 @@ The resulting certificates are placed int the folder `/etc/letsencrypt/live/sail
18 22
19 23
To spin up the docker container (above) once a week to renew the SSL cert a cronjob runs the renew script as user 'certbot' once a week.
20 24
21
-`# Check if sail-insight.com cert needs renewing
22
-0 1 * * Thu su -u certbot docker run -it --rm --name certbot -v "/etc/letsencrypt:/etc/letsencrypt" -v "/var/lib/letsencrypt:/var/lib/letsencrypt" -v "/home/trac/sail-insight-website/:/home/trac/sail-insight-website" certbot/certbot renew && service httpd reload`
25
+```
26
+# Check if sail-insight.com cert needs renewing
27
+0 1 * * Thu su -u certbot docker run -it --rm --name certbot -v "/etc/letsencrypt:/etc/letsencrypt" -v "/var/lib/letsencrypt:/var/lib/letsencrypt" -v "/home/trac/sail-insight-website/:/home/trac/sail-insight-website" certbot/certbot renew && service httpd reload
28
+```
23 29
24 30
# Apache
25 31