Revize f720e47f

another hotifx: having fun with cert

docker-compose-prod.yml

@@ -8 +8 @@
                      - "443:443"
               volumes: 
                      - /etc/letsencrypt:/root/.acme.sh/heatmap.zcu.cz
-                     - ./docker/nginx/sites-dev:/etc/nginx/sites-available
+                     - ./docker/nginx/sites:/etc/nginx/sites-available
+                     - /acme-challenge:website/public/.well-known/acme-challenge/

docker/nginx/sites/default.conf

@@ -4 +4 @@
     listen [::]:80 default_server ipv6only=on;
 
     server_name heatmap.zcu.cz www.heatmap.zcu.cz;
-    ssl_certificate /etc/letsencrypt/heatmap.zcu.cz/heatmap.zcu.cz.cer;
-    ssl_certificate_key /etc/letsencrypt/heatmap.zcu.cz/privkey.key;
+    ssl_certificate /root/.acme.sh/heatmap.zcu.cz/heatmap.zcu.cz.cer;
+    ssl_certificate_key /root/.acme.sh/heatmap.zcu.cz/heatmap.zcu.cz.key;
 
     ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
     ssl_prefer_server_ciphers on;

scripts/renew_certificate.sh

@@ -5 +5 @@
 
 if [ "$1" = "new" ]; then
     docker-compose exec nginx /bin/sh -c "
-    cd /etc/letsencrypt && mkdir heatmap.zcu.cz && cd heatmap.zcu.cz; \
+    cd /root/.acme.sh/heatmap.zcu.cz/ \
     openssl dhparam -dsaparam -out dhparams.pem 4096; \
-    bash /root/.acme.sh/acme.sh --issue --nginx -d heatmap.zcu.cz -k 4096 --debug; \
+    bash /root/.acme.sh/acme.sh --issue -w /var/www/symfony/public -d heatmap.zcu.cz -k 4096 --debug 2; \
     bash /root/.acme.sh/acme.sh --installcert -d heatmap.zcu.cz \
     --key-file /root/.acme.sh/heatmap.zcu.cz/heatmap.zcu.cz.key \
     --fullchain-file /root/.acme.sh/heatmap.zcu.cz/fullchain.cer \