Ferri Sutanto fer-ri

Let's Encrypt on Ubuntu 14.04, nginx with webroot auth

This document details how I setup LE on my server. Firstly, install the client as described on http://letsencrypt.readthedocs.org/en/latest/using.html and make sure you can execute it. I put it in /root/letsencrypt.

As it is not possible to change the ports used for the standalone authenticator and I already have a nginx running on port 80/443, I opted to use the webroot method for each of my domains (note that LE does not issue wildcard certificates by design, so you probably want to get a cert for www.example.com and example.com).

Configuration

For this, I placed config files into etc/letsencrypt/configs, named after <domain>.conf. The files are simple:

Prerequisites : the letsencrypt CLI tool

This method allows your to generate and renew your Lets Encrypt certificates with 1 command. This is easily automatable to renew each 60 days, as advised.

You need nginx to answer on port 80 on all the domains you want a certificate for. Then you need to serve the challenge used by letsencrypt on /.well-known/acme-challenge. Then we invoke the letsencrypt command, telling the tool to write the challenge files in the directory we used as a root in the nginx configuration.

I redirect all HTTP requests on HTTPS, so my nginx config looks like :

server {

The perfect gulp.js file

Tasks

serve

Runs a connect web server, serving files from /client on port 3000.

	#
	# REQUIRES:
	# - server (the forge server instance)
	# - site_name (the name of the site folder)
	# - sudo_password (random password for sudo)
	# - db_password (random password for database user)
	# - event_id (the provisioning event name)
	# - callback (the callback URL)
	#

	#!/bin/bash

	#
	# Script to create MySQL db + user
	#
	# @author Raj KB <[email protected]>
	# @website http://www.magepsycho.com
	# @version 0.1.0

	################################################################################

	<style lang="sass" scoped>
	.app {
	position : relative;
	width : 100vw;
	height : 100vh;
	margin : 0 !important;
	}

	.appbar {
	position : absolute;

	## Auto-restart PHP when it's returning errors
	#
	# Make sure that http://localhost/test.php is an actual PHP script. If it starts returning
	# 500 errors, restart the PHP-FPM service
	* * * * * /usr/bin/curl --head -sf http://localhost/test.php -o /dev/null \|\| /usr/sbin/service php5-fpm restart

	<?PHP
	/**
	* Spintax - A helper class to process Spintax strings.
	* @name Spintax
	* @author Jason Davis - https://www.codedevelopr.com/
	* Tutorial: https://www.codedevelopr.com/articles/php-spintax-class/
	*/
	class Spintax
	{
	public function process($text)

	//
	// Smooth scroll-to inspired by:
	// http://stackoverflow.com/a/24559613/728480
	//

	module.exports = function (scrollTo, scrollDuration) {

	//
	// Set a default for where we're scrolling to
	//