This script will help you to generate a trusted SSL certificate issued by Let's Encrypt using certbot for your Shift node.
In order to complete this script, you will need:
- Have a working Shift instance
- Your own domain. You can get a free one for one year at dot.tk
- Your domain will look something like this -->
subdomain.domain.tk
- Your domain will look something like this -->
- An A Record that points your domain to the public IP address of your server
- To know your network interface
- Run
ifconfig
and write it down (normally it is eth0, eth1, eth2, ens1, ens2, ens3...)
- Run
First of all you'll need to clone this repository:
cd ~
git clone https://github.com/nytrobound/free-ssl.git
cd free-ssl
To generate and install the trusted SSL certificate, run: bash installssl.sh
The script will guide you through the installation process.
renewssl.sh
checks the expiring date of your certificate and renew it, if the expiration date is less than 30 days. However, you will need to add a cronjob with crontab -e
to automatically execute the script.
Make sure to replace $SSLUSER with the username you ran the script on!
Example:* 12 * * WED bash /home/$SSLUSER/free-ssl/start_renew.sh >> /home/$SSLUSER/free-ssl/logs/cron.log
This cronjob checks and renews your SSL certificate every Wednesday at 12pm.
You can also use Crontab Generator to generate a custom cronjob.
Documentation: https://certbot.eff.org/docs
Software project: https://github.com/certbot/certbot
Notes for developers: https://certbot.eff.org/docs/contributing.html
Main Website: https://certbot.eff.org
Let's Encrypt Website: https://letsencrypt.org
Community: https://community.letsencrypt.org
ACME spec: http://ietf-wg-acme.github.io/acme/
ACME working area in github: https://github.com/ietf-wg-acme/acme
Original script: https://github.com/mrgrshift/free-ssl.git