diff options
Diffstat (limited to 'config-certbot.PKGBUILD')
| -rw-r--r-- | config-certbot.PKGBUILD | 7 |
1 files changed, 3 insertions, 4 deletions
diff --git a/config-certbot.PKGBUILD b/config-certbot.PKGBUILD index 77b6e56..5a9e128 100644 --- a/config-certbot.PKGBUILD +++ b/config-certbot.PKGBUILD @@ -24,6 +24,7 @@ cd "$pkgdir" # So, I've encapsulated this into the script # `/etc/ssl/misc/certbot-get`. Edit `/etc/ssl/misc/certbot-get.d/` to # manipulate the list of domains, then run the script. +install -d etc/ssl/misc/certbot-get.d add-file -m755 etc/ssl/misc/certbot-get <<<'#!/bin/bash { set -eu @@ -127,7 +128,6 @@ server { listen [::]:80 default_server; server_name _; - # Redirect all HTTP requests to HTTPS with a 301 Moved Permanently response. location / { return 301 https://\$host\$request_uri; } @@ -135,13 +135,12 @@ server { location /.well-known/acme-challenge { root /var/lib/letsencrypt; default_type "text/plain"; - #try_files \$uri =404; } } # certs sent to the client in SERVER HELLO are concatenated in ssl_certificate -ssl_certificate /etc/letsencrypt/live/winston.parabola.nu/fullchain.pem; -ssl_certificate_key /etc/letsencrypt/live/winston.parabola.nu/privkey.pem; +ssl_certificate /etc/ssl/private/myhostname/fullchain.pem; +ssl_certificate_key /etc/ssl/private/myhostname/privkey.pem; ssl_session_timeout 1d; ssl_session_cache shared:SSL:50m; ssl_session_tickets off; |