Dug up this old thread. In case anybody wondering the same question about
certbot/let's encrypt and web2py.
1. use `--standalone` as David advised. But you have to stop the webserver
everytime you renew.
2. instead, you can use the standard `--webroot` method. Here, you need to
edit your vhost file be it apache or nginx, add a location block:
Using nginx for example:
- location /.well-known {
- root /home/www-data/web2py;
- }
This way, nginx will server the .well-known and skip passing it onto
uwsgi/web2py. Make sure you restart nginx after making this server conf
change and use
sudo certbot certonly/renew --webroot -w /your/path -d example.com -d
www.example.com
On Tuesday, May 30, 2017 at 12:05:01 PM UTC-7, Dave S wrote:
>
>
>
> On Tuesday, May 30, 2017 at 8:50:50 AM UTC-7, Raymond Smith wrote:
>>
>> Please tell me how you did this!! :) IT would be really helpful :)
>>
>>
> I can't answer for the Apache case (or even for the preferred NginX case),
> but I found using CertBot in manual mode was easy (on AWS Linux). Rocket
> was running on port 80, so I told CertBot to use port 443. Whizz bang,
> everything done. I stopped Rocket, restarted it with port 443 and the -c
> and -k arguments (pointing to where CertBot deposited the goods), and
> Poof! It worked!
>
> I still have a Rocket running on port 80, redirecting to https, but will
> probably stop it to run CertBot on port 80 when I need to renew. If I get
> nginx going before then, I'll update this post.
>
> /dps
>
>
--
Resources:
- http://web2py.com
- http://web2py.com/book (Documentation)
- http://github.com/web2py/web2py (Source code)
- https://code.google.com/p/web2py/issues/list (Report Issues)
---
You received this message because you are subscribed to the Google Groups
"web2py-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.