1. install lighttpd with OpenSSL ````console apt-cache search lighttpd lighttpd-mod-openssl ```` 1. your lighttpd config file /etc/lighttpd/conf-enabled/ssl.conf may look like below: ````console var.confdir = "/etc/lighttpd" $SERVER["socket"] == "0.0.0.0:443" { ssl.engine = "enable" ssl.pemfile = "/var/www/all.pem" ssl.ca-file = "/var/www/fullchain.pem" server.name = "ww1.shininglight-piercing.com" ``` 1. install acme into /root/ ```console git clone https://github.com/acmesh-official/acme.sh.git cd ./acme.sh ./acme.sh --install -m my@example.com ``` 1. Create a bash script like /root/ssl.sh to issue the certs and install them to /var/www/ ```bash domain=www.foo.com /root/.acme.sh/acme.sh --issue -d $domain -w /var/www/html /acme/.acme.sh/acme.sh \ --install-cert \ -d $domain \ --cert-file /var/www/cert.pem \ --key-file /var/www/key.pem \ --fullchain-file /var/www/fullchain.pem \ --reloadcmd "cd /var/www/; cat cert.pem key.pem > all.pem;/bin/systemctl restart lighttpd" ``` 1. permission it ```console chmod +x ssl.sh ``` 1. run the script ```console ./ssl.sh ```

https://github.com/acmesh-official/acme.sh

Create /.well-known/acme-challenge/ directory ```console mkdir .well-known/acme-challenge/ -p chown -R www-data:www-data .well-known chmod -R 0555 .well-known/acme-challenge ``` in for lighttpd config setup an alias ```apache2conf server.modules += ( "mod_alias", ) alias.url = ( "/.well-known/acme-challenge/" => "/var/www/html/.well-known/acme-challenge/" ) ``` 03.05.23

https://www.cyberciti.biz/faq/how-to-configure-lighttpd-web-server-with-free-lets-encrypt-ssl-certificate-on-debian-or-ubuntu-linux/

• Home
• Notebook
• Contact us

• Privacy Statement
• 

Copyleft ☠ 2024