Skip to content

Latest commit

 

History

History
37 lines (27 loc) · 2.15 KB

README.md

File metadata and controls

37 lines (27 loc) · 2.15 KB
Raw

letsencrypt-install-elasticbeanstalk-single-instance

.ebextensions script for automatically installing letsencrypt SSL on an Elastic Beanstalk single instance running Apache

Instructions

  1. The domain you wish to use must already have an A record pointing to the Elastic IP of your single instance, or by adding an alias record within Amazon Route 53 to your elastic beanstalk address. As long as the site is resolving on the domain you wish to use, you're good.

  2. Copy the contents of .ebextensions folder to your project .ebextensions folder

  3. Either change the values of environment variables in the config file, or add them to the container option from the console.

  4. EB Deploy. The script will:

  • If SSL certificate already installed does nothing.
  • Checks to see if the SSL certificate already exists on the S3 bucket used for storing applicatons. If it does, it downloads and installs from S3.
  • Check to see if /etc/httpd/conf.d/ssl.conf exists already and if not, attempts to install certificate
  • Allow incoming traffic on port 443
  • Allow pinging to the server
  • Wait until new ec2 instance domain name resolves - important in the case of a server being replaced or type changed.
  • Install certbot
  • Setup and download a certificate from letsencrypt
  • Configure the Apache server with new certificate
  • Restart Apache
  • Install weekly cron to auto-update certificate
  • Install weekly cron to copy updated certificate to S3
  1. After setup, you may force install the SSL certificate again by changing LE_INSTALL_SSL_ON_DEPLOY to true.

Get files from command line

wget https://raw.githubusercontent.com/tomyates/letsencrypt-install-elasticbeanstalk-single-instance/master/.ebextensions/9-ssl-letsencrypt-single-instance.config
wget https://raw.githubusercontent.com/tomyates/letsencrypt-install-elasticbeanstalk-single-instance/master/.ebextensions/9-letsencrypt-ssl-install.sh
wget https://raw.githubusercontent.com/tomyates/letsencrypt-install-elasticbeanstalk-single-instance/master/.ebextensions/ssl.conf.template
wget https://raw.githubusercontent.com/tomyates/letsencrypt-install-elasticbeanstalk-single-instance/master/.ebextensions/9-post-renew-cp-s3.sh