wiki/info/landscape/sail-insight.com-website.md
... ...
@@ -5,26 +5,28 @@ The sail-insight micro site is hosted statically in `/home/trac/sail-insight-web
5 5
The SSL certificate is provided by LetsEncrypt. Since `certbot` is not available on Amazon AMI Linux a docker container with symlinks to the three relevant folders is spun up to obtain the SSL certificates:
6 6
7 7
```
8
-docker run -it --rm --name certbot -v "/etc/letsencrypt:/etc/letsencrypt" -v "/var/lib/letsencrypt:/var/lib/letsencrypt" -v "/home/trac/sail-insight-website/:/home/trac/sail-insight-website" certbot/certbot certonly
8
+docker run -it --rm --name certbot -v "/etc/letsencrypt:/etc/letsencrypt" -v "/var/lib/letsencrypt:/var/lib/letsencrypt" -v "/var/log/letsencrypt:/var/log/letsencrypt" -v "/home/trac/sail-insight-website/:/home/trac/sail-insight-website" certbot/certbot certonly
9 9
```
10 10
11 11
The same docker container is spun up once a week to check whether the certificate needs renewing:
12 12
13 13
```
14
-docker run -it --rm --name certbot -v "/etc/letsencrypt:/etc/letsencrypt" -v "/var/lib/letsencrypt:/var/lib/letsencrypt" -v "/home/trac/sail-insight-website/:/home/trac/sail-insight-website" certbot/certbot renew
14
+docker run -it --rm --name certbot -v "/etc/letsencrypt:/etc/letsencrypt" -v "/var/lib/letsencrypt:/var/lib/letsencrypt" -v "/var/log/letsencrypt:/var/log/letsencrypt" -v "/home/trac/sail-insight-website/:/home/trac/sail-insight-website" certbot/certbot renew
15 15
```
16 16
17 17
The docker container should delete itself after it ran. (`--rm` flag)
18 18
19 19
The resulting certificates are placed int the folder `/etc/letsencrypt/live/sail-insight.com/`. Access to `/home/trac/sail-insight-website` is needed to verify ownership of the domain.
20 20
21
+Certbot logs are written to `/var/log/letsencrypt/letsencrypt.log`
22
+
21 23
# Cron Job
22 24
23 25
To spin up the docker container (above) once a week to renew the SSL cert a cronjob runs the renew script as user 'certbot' once a week.
24 26
25 27
```
26 28
# Check if sail-insight.com cert needs renewing
27
-0 1 * * Thu sudo -u certbot docker run --rm --name certbot -v "/etc/letsencrypt:/etc/letsencrypt" -v "/var/lib/letsencrypt:/var/lib/letsencrypt" -v "/home/trac/sail-insight-website/:/home/trac/sail-insight-website" certbot/certbot renew && service httpd reload
29
+0 1 * * Thu sudo -u certbot docker run --rm --name certbot -v "/etc/letsencrypt:/etc/letsencrypt" -v "/var/lib/letsencrypt:/var/lib/letsencrypt" -v "/var/log/letsencrypt:/var/log/letsencrypt" -v "/home/trac/sail-insight-website/:/home/trac/sail-insight-website" certbot/certbot renew && service httpd reload
28 30
```
29 31
30 32
# Apache