52 lines
1.1 KiB
Markdown
52 lines
1.1 KiB
Markdown
|
# Evoacme 1.3
|
|||
|
|
|
|||
|
|
EvoAcme is an [Ansible](https://www.ansible.com/) role and a [Certbot](https://certbot.eff.org) wrapper for generate [Let's Encrypt](https://letsencrypt.org/) certificates.
|
|||
|
|
|
|||
|
|
It is a project hosted at [Evolix's forge](https://forge.evolix.org/projects/ansible-roles/repository/revisions/master/show/evoacme)
|
|||
|
|
|
|||
|
|
# How to install
|
|||
|
|
|
|||
|
|
1 - Create a playbook with evoacme role
|
|||
|
|
|
|||
|
|
```
|
|||
|
|
---
|
|||
|
|
- hosts: hostname
|
|||
|
|
become: yes
|
|||
|
|
roles:
|
|||
|
|
- role: evoacme
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
2 - Install evoacme prerequisite with ansible
|
|||
|
|
|
|||
|
|
```
|
|||
|
|
ansible-playbook playbook.yml -Kl hostname
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
3 - Include letsencrypt.conf in your webserver
|
|||
|
|
|
|||
|
|
For Apache, you just need to ensure that you don't overwrite "/.well-known/acme-challenge" Alias with a Redirect or Rewrite directive.
|
|||
|
|
|
|||
|
|
For Nginx, you must include letsencrypt.conf in all wanted vhost :
|
|||
|
|
```
|
|||
|
|
include /etc/nginx/letsencrypt.conf;
|
|||
|
|
nginx -t
|
|||
|
|
service nginx reload
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
4 - Create a CSR for a vhost with make-csr
|
|||
|
|
|
|||
|
|
```
|
|||
|
|
# vhostname is vhostfile without .conf ext
|
|||
|
|
make-csr vhostname
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
8 - Generate the certificate with evoacme
|
|||
|
|
|
|||
|
|
```
|
|||
|
|
evoacme vhostname
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
# License
|
|||
|
|
|
|||
|
|
Evoacme is open source software licensed under the AGPLv3 License.
|