Daniel Hansson
f320e471ae
prepare for TLS-ALPN-01
...
When available in Cerbot...
2019-01-30 09:37:00 +01:00
Daniel Hansson
4611cc38a4
updates should be done via the update script...
2019-01-29 21:59:24 +01:00
Daniel Hansson
91b4628b9e
upgrade certbot to the latest version at every run
2019-01-29 21:12:02 +01:00
Daniel Hansson
afb7630e80
change color ( #747 )
2018-12-17 23:27:01 +01:00
ggeorgg
f1680744f9
Replace almost all echos by printf function with color ( #741 )
2018-12-13 21:34:03 +01:00
Daniel Hansson
e19ef1c4bd
add tls-sni and remove webroot
...
for ppl which only wants to open port 443
2018-12-07 20:35:55 +01:00
Daniel Hansson
be4f5cc857
add full path
2018-12-04 16:57:23 +01:00
Daniel Hansson
ae79af5e30
remove Header always set as it's set in .htaccess ( #717 )
2018-11-23 22:24:59 +01:00
Daniel Hansson
7402b9018c
sed Tech and Me|T&M Hansson IT
...
Signed-off-by: Daniel Hansson <daniel@techandme.se>
2018-10-14 15:08:49 +02:00
Daniel Hansson
c59a541e70
remove index.php from www root as it's not needed on LE success
2018-09-20 18:58:52 +02:00
Daniel Hansson
4a29c8143a
prepare for nextcloud 14 ( #633 )
2018-09-05 16:09:55 +02:00
Daniel Hansson
f3237e4c42
change to acme-v02 for DNS
2018-08-27 18:32:24 +02:00
Daniel Hansson
e68b13a4a8
make SSL config backwards compatible ( #630 )
2018-08-17 19:39:17 +02:00
Daniel Hansson
8ab7aafa66
add exit
2018-08-13 22:15:57 +02:00
Daniel Hansson
d73116654f
Introduce 'docker_prune_this' & 'docker_prune_except_this' ( #628 )
2018-08-13 21:26:31 +02:00
Daniel Hansson
6e93b3bbd9
not compatible with
2018-08-13 18:31:57 +02:00
Daniel Hansson
8d7af3a046
some more smaller fixes ( #620 )
2018-08-09 15:45:48 +02:00
Daniel Hansson
4acfcaab3c
Change to PHP-FPM ( #591 )
2018-08-09 01:23:48 +02:00
Daniel Hansson
06a0417cb3
accept IP logging
2018-08-01 15:54:06 +02:00
Daniel Hansson
2c7fcd4246
fix https://github.com/nextcloud/vm/issues/531
2018-05-09 14:26:55 +02:00
Daniel Hansson
bd24bb69ac
change to DNS challange instead of certonly ( #496 )
2018-03-17 17:56:45 +01:00
Daniel Hansson
e1288ea7a7
LE needs port 80 to verify domain ( #486 )
2018-03-04 19:44:47 +01:00
Daniel Hansson
75dace2501
Happy-New-Year! ( #438 )
2018-01-06 19:28:28 +01:00
Daniel Hansson
dbb1b3fa27
fix whiptail msgbox instead of boring text ( #406 )
2017-12-05 21:21:42 +01:00
Stefan Sieber
9bb44361bc
Ssl chiper ( #400 )
2017-10-10 18:59:03 +02:00
Daniel Hansson
b0ded9c05f
make check open port a function ( #376 )
2017-10-04 20:23:13 +02:00
Daniel Hansson
04acb76a09
Revert "add path ( #380 )" ( #382 )
...
This reverts commit 6aa0ae0503
.
2017-09-27 12:09:49 +02:00
Daniel Hansson
6aa0ae0503
add path ( #380 )
2017-09-27 12:04:55 +02:00
gabasync
5076852d06
DHPARAMS 4096 to allow for IE11/Win7 to work instead of Page Cant Be Displayed ( #369 )
...
ssllabs.com shows a standard IE11/Win7 setup will not work. For companies that do not allow alternative popular Browsers this can be a non go for internal company deployment. Lowering the DH to 4096 may alleviate this issue. Below is the ssllabs.com lab results:
IE 11 / Win 7 R Client does not support DH parameters > 4096 bits
RSA 4096 (SHA256) | TLS 1.2 | TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 | DH 8192
2017-09-21 21:29:50 +02:00
Daniel Hansson
bca43daaa0
typo
2017-09-02 13:09:07 +02:00
Daniel Hansson
fb6032559a
no need for pre and post hooks as it's done when creating the cert ( #358 )
2017-09-02 13:02:08 +02:00
Daniel Hansson
417ded1093
various fixes ( #356 )
2017-08-31 07:24:08 +02:00
Daniel Hansson
06fdbe3111
make LE install a function ( #308 )
2017-07-22 23:28:35 +02:00
Daniel Hansson
44cdd3aea8
install_if_not ( #296 )
...
Signed-off-by: Daniel Hansson <daniel@techandme.se>
modified: apps/collabora.sh
modified: apps/onlyoffice.sh
modified: apps/spreedme.sh
modified: lets-encrypt/activate-ssl.sh
modified: lib.sh
modified: nextcloud_update.sh
test
2017-07-11 17:57:19 +02:00
Daniel Hansson
2f9df3d640
check if service is running (master)
2017-06-29 18:15:06 +02:00
Daniel Hansson
d503c8ec31
add pre and post hook ( #289 )
2017-06-29 17:49:07 +02:00
Daniel Hansson
41d633694a
set domain in /etc/hosts ( #271 )
2017-06-15 16:46:49 +02:00
Daniel Hansson
898f0354a2
Set hostname in /etc/hosts ( #269 )
2017-06-15 16:15:44 +02:00
Daniel Hansson
8f1d88d217
A+ on SSL Quality Labs ( #270 )
2017-06-14 00:23:57 +02:00
Daniel Hansson
f258ce7bd9
Remove -q from grep in SSL ( #204 )
2017-04-15 01:28:15 +02:00
Daniel Hansson
e3372c7cb1
cleanup
2017-04-10 00:07:51 +02:00
Daniel Hansson
3fc8277b30
Avoid error message grep: /tmp/le_test: No such file or directory
2017-04-10 00:05:17 +02:00
Daniel Hansson
ab649db479
Rewrite is now done! ( #196 )
2017-04-09 22:43:30 +02:00
Daniel Hansson
fcc45426c9
Update renewal command ( #175 )
2017-03-20 15:46:04 +01:00
Daniel Hansson
bb6b0a10c6
check with both curl and wget
2017-03-20 15:07:25 +01:00
Daniel Hansson
0fb9d8b45f
add date
2017-03-16 20:21:15 +01:00
Daniel Hansson
a37b7cbedb
if it exits there is a risk that apache won't boot
2017-03-16 19:24:50 +01:00
Daniel Hansson
ad6086affa
cleanup
2017-03-12 00:53:18 +01:00
Daniel Hansson
616ff8f8ed
Get A+ rating on security scan ( #168 )
2017-03-10 18:57:38 +01:00
Luis Guzman
6b52e4016c
Rely on distro's LE ( #165 )
2017-03-10 18:47:48 +01:00