Revize 4cd05f77

hotifx

docker-compose-prod.yml

@@ -7 +7 @@
               ports: 
                      - "443:443"
               volumes: 
-                     - /etc/letsencrypt:/root/.acme.sh/heatmap.zcu.cz
-                     - ./docker/nginx/sites:/etc/nginx/sites-available
+                     - /etc/certificate:/certificate
+                     - ./docker/nginx/sites-dev:/etc/nginx/sites-available
                      - /acme-challenge:/var/www/symfony/public/.well-known/acme-challenge/

docker/nginx/sites/default.conf

@@ -4 +4 @@
     listen [::]:80 default_server ipv6only=on;
 
     server_name heatmap.zcu.cz www.heatmap.zcu.cz;
-    ssl_certificate /root/.acme.sh/heatmap.zcu.cz/heatmap.zcu.cz.cer;
-    ssl_certificate_key /root/.acme.sh/heatmap.zcu.cz/heatmap.zcu.cz.key;
+    ssl_certificate /certificate/key.pem;
+    ssl_certificate_key /certificate/cert.pem;
 
     ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
     ssl_prefer_server_ciphers on;

scripts/renew_certificate.sh

@@ -5 +5 @@
 
 if [ "$1" = "new" ]; then
     docker-compose exec nginx /bin/sh -c "
-    cd /root/.acme.sh/heatmap.zcu.cz/ \
-    openssl dhparam -dsaparam -out dhparams.pem 4096; \
-    bash /root/.acme.sh/acme.sh --issue -w /var/www/symfony/public -d heatmap.zcu.cz -k 4096 --debug 2; \
-    bash /root/.acme.sh/acme.sh --installcert -d heatmap.zcu.cz \
-    --key-file /root/.acme.sh/heatmap.zcu.cz/heatmap.zcu.cz.key \
-    --fullchain-file /root/.acme.sh/heatmap.zcu.cz/fullchain.cer \
+    cd /root/.acme.sh; \
+    bash acme.sh  --issue  -d www.heatmap.zcu.cz  --nginx /etc/nginx/sites-available/default.conf --debug 2; \
+    bash acme.sh --installcert -d heatmap.zcu.cz \
+    --key-file /certificate/key.pem \
+    --fullchain-file /certificate/cert.pem \
     --reloadcmd 'bash /etc/init.d/nginx reload';
     ";
 else