# new xyzca as both mail and website server: # better switch to root user instead of using `sudo acme.sh ...`? # https://github.com/acmesh-official/acme.sh/wiki/sudo sudo -i # I guess maybe register if first time on the server? not sure
acme.sh --home /etc/acme.sh --register-account -m [email protected] # need to change from `server_name localhost;` to `server_name flylightning.xyz;` in /etc/nginx/nginx.conf # when add new DNS subdomain, maybe sometimes maybe need --force, also need `acme.sh --home /etc/acme.sh --cron --force` afterwards, not sure why
acme.sh --home /etc/acme.sh --issue --nginx -d flylightning.xyz -d git.flylightning.xyz -d mirrors.flylightning.xyz -d mail.flylightning.xyz
acme.sh --home /etc/acme.sh --install-cert -d flylightning.xyz --key-file /etc/postfix/flylightning.key --fullchain-file /etc/postfix/flylightning.pem --reloadcmd "systemctl force-reload nginx"
# if only email server, if no webserver # better switch to root user instead of using `sudo acme.sh ...`? # https://github.com/acmesh-official/acme.sh/wiki/sudo sudo -i # I guess maybe register if first time on the server? not sure
acme.sh --home /etc/acme.sh --register-account -m [email protected] # acme.sh default zerossl does not support port 443 alpn mode, need to use letsencrypt but still has issues see https://github.com/acmesh-official/acme.sh/issues/4802 # so I choose to use port 80 builtin standalone webserver, need open 80 port, also need socat # https://github.com/acmesh-official/acme.sh/wiki/How-to-issue-a-cert
acme.sh --home /etc/acme.sh --issue --standalone -d mail2.flylightning.xyz
acme.sh --home /etc/acme.sh --install-cert -d mail2.flylightning.xyz --key-file /etc/postfix/flylightning.key --fullchain-file /etc/postfix/flylightning.pem