This will configure an Asustor NAS to use letsencrypt certificate without exposing it to the internet.
To achieve this we use certbot with DNS-01 challenge to Cloudflare.
mkdir /volume1/system/letsencrypt
touch /volume1/system/letsencrypt/cloudflare.ini
chown root:root /volume1/system/letsencrypt
chmod 700 /volume1/system/letsencrypt
chmod 600 /volume1/system/letsencrypt/cloudflare.ini| ######################################################################### | |
| # Title: CrowdSec : Pushover Notification (API) # | |
| # Author(s): JigSawFr # | |
| # URL: https://github.com/crowdsecurity/crowdsec # | |
| ######################################################################### | |
| # MIT License # | |
| ######################################################################### | |
| type: http # Don't change | |
| name: http_default # Must match the registered plugin in the profile |
| # 1. Convert our ".jks" file to ".p12" (PKCS12 keystore format): | |
| /opt/applications/confluence/jre/bin/keytool -importkeystore -srckeystore /opt/applications/confluence-ssl/tomcat.keystore -destkeystore tomcat.p12 -deststoretype PKCS12 | |
| # 2. Extract pem (certificate) from ".p12" keystore file: | |
| openssl pkcs12 -nokeys -in tomcat.p12 -out certificate-chain.pem | |
| # 3. Extract unencrypted key file from ".p12" keystore file: | |
| openssl pkcs12 -nocerts -nodes -in tomcat.p12 -out unencrypted-key.key |
| #!/bin/sh | |
| # ############# PLEX DOCKER CONTAINER RESTART WITH RANCHER ############# # | |
| # ###################################################################### # | |
| # Written by JigSawFr <https://github.com/JigSawFr> # | |
| # ###################################################################### # | |
| # With this script, you can restart your plex container when an update is available, or if plex seems down. | |
| # 1. You need to have installed Rancher Management Server (see: https://github.com/rancher/rancher#installation) |