From 93f3023a3175d3f20d27a9fc74af2c3c48f50fd8 Mon Sep 17 00:00:00 2001
From: Kévin Le Gouguec <kevin.legouguec@gmail.com>
Date: Sun, 8 Aug 2021 14:30:27 +0200
Subject: Note how to generate HTTPS certificates

---
 guides/cloud/vps.org | 8 ++++++++
 1 file changed, 8 insertions(+)

(limited to 'guides')

diff --git a/guides/cloud/vps.org b/guides/cloud/vps.org
index 537f567..71fda14 100644
--- a/guides/cloud/vps.org
+++ b/guides/cloud/vps.org
@@ -100,6 +100,13 @@ sudo systemctl restart fail2ban
 Check how these rules fare against real bot searches with
 ~fail2ban-regex /var/log/nginx/access.log
 /etc/fail2ban/filter.d/nginx-botsearch.local~.
+*** HTTPS
+#+begin_src sh
+sudo apt install certbot python3-certbot-nginx
+sudo certbot --nginx -d $FQDN www.$FQDN
+sudo systemctl reload nginx
+#+end_src
+
 ** Git server
 *** SSH access
 #+begin_src sh
@@ -142,6 +149,7 @@ css=/cgit.css
 logo=/cgit.png
 
 virtual-root=/
+# Change these to https:// after setting up certbot:
 clone-prefix=http://git.$FQDN
 clone-url=http://git.$FQDN/$CGIT_REPO_URL
 
-- 
cgit v1.2.3