Forum Domoticz en français

Code : Tout sélectionner

Letsencrypt

https://www.domoticz.com/wiki/Native_secure_access_with_Lets_Encrypt


sudo /etc/letsencrypt/letsencrypt-auto certonly --webroot --email philippe@toto.fr -d monsite.duckdns.org -w /home/pi/domoticz/www/

sudo mv ~/domoticz/server_cert.pem ~/domoticz/server_cert.pem.org  # see below about DH params why not just delete it
sudo cat /etc/letsencrypt/live/monsite.duckdns.org/privkey.pem >> ~/domoticz/server_cert.pem
sudo cat /etc/letsencrypt/live/monsite.duckdns.org/fullchain.pem >> ~/domoticz/server_cert.pem
sudo cp ~/domoticz/server_cert.pem ~/domoticz/letsencrypt_server_cert.pem
sudo /etc/init.d/domoticz.sh restart

Après redemarrage si erreur domoticz
Error: [web:443] missing SSL DH parameters from file 
Add the DHparam : 
sudo cat /etc/ssl/certs/dhparam.pem >> ~/domoticz/server_cert.pem 
and if you get also an error like : /etc/ssl/certs/dhparam.pem: No such file or directory 
cd /etc/ssl/certs
sudo openssl dhparam -out dhparam.pem 2048
sudo cat /etc/ssl/certs/dhparam.pem >> ~/domoticz/server_cert.pem
sudo /etc/init.d/domoticz.sh restart

Code : Tout sélectionner

#!/bin/bash
sudo mv /home/pi/domoticz/server_cert.pem /home/pi/domoticz/server_cert.pem.org
sudo cat /etc/letsencrypt/live/monsite.duckdns.org/privkey.pem >> /home/pi/domoticz/server_cert.pem
sudo cat /etc/letsencrypt/live/monsite.duckdns.org/fullchain.pem >> /home/pi/domoticz/server_cert.pem
sudo cp /home/pi/domoticz/server_cert.pem /home/pi/domoticz/letsencrypt_server_cert.pem
sudo cat /etc/ssl/certs/dhparam.pem >> /home/pi/domoticz/server_cert.pem
sudo /etc/init.d/domoticz.sh restart

Code : Tout sélectionner

0 23 1 * * sudo /etc/letsencrypt/certbot-auto renew --webroot -w ~/domoticz/www/ --deploy-hook ~/domoticz/scripts/deploy-cert.sh >/dev/null