yangvipguang

global
  log         127.0.0.1 syslog
  maxconn     1000
  user        haproxy
  group       haproxy
  daemon
  tune.ssl.default-dh-param 4096
  ssl-default-bind-options no-sslv3 no-tls-tickets
  ssl-default-bind-ciphers EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH

yangvipguang

#!/bin/bash
#
#  Let's Encrypt HAProxy script
#
###################################

DOMAINS=(
   "foo.example.com"
   "bar.example.com"
)

yangvipguang

global
  log         127.0.0.1 syslog
  maxconn     1000
  user        haproxy
  group       haproxy
  daemon


defaults
  log  global

yangvipguang

user www-data;
worker_processes 4;
pid /var/run/nginx.pid;



events {
  worker_connections 1024;
  use epoll;
  multi_accept on;

yangvipguang

user www-data;
worker_processes 4;
pid /var/run/nginx.pid;



events {
  worker_connections 1024;
  use epoll;
  multi_accept on;

yangvipguang

#!/bin/bash
#
# Put in your email and your actual domain name
# Server is for staging/testing not getting live certs

sudo letsencrypt certonly \
        --server https://acme-staging.api.letsencrypt.org/directory  \
        --webroot --webroot-path "/usr/share/nginx/html/" \
        --keep-until-expiring \
        --text \

yangvipguang

global
  log         127.0.0.1 syslog
  maxconn     1000
  user        haproxy
  group       haproxy
  daemon


defaults
  log  global

yangvipguang

user www-data;
worker_processes 4;
pid /var/run/nginx.pid;



events {
  worker_connections 1024;
  use epoll;
  multi_accept on;

yangvipguang

global
	log /dev/log	local0
	log /dev/log	local1 notice
	chroot /var/lib/haproxy
	stats socket /run/haproxy/admin.sock mode 660 level admin
	stats timeout 30s
	user haproxy
	group haproxy
	daemon
	maxconn 2048

yangvipguang

#!/bin/bash

web_service='nginx'
config_file="/usr/local/etc/le-renew-webroot.ini"

le_path='/opt/letsencrypt'
exp_limit=30;

if [ ! -f $config_file ]; then
        echo "[ERROR] config file does not exist: $config_file"