This shows you the differences between two versions of the page.
Next revision | Previous revision | ||
openbsd:www:cgit [2019/12/02 08:20] jrmu created |
openbsd:www:cgit [2019/12/02 10:10] jrmu |
||
---|---|---|---|
Line 6: | Line 6: | ||
<code> | <code> | ||
server "git.ircnow.org" { | server "git.ircnow.org" { | ||
- | alias "bnc3.ircnow.org" | ||
listen on * port 80 | listen on * port 80 | ||
location "/.well-known/acme-challenge/*" { | location "/.well-known/acme-challenge/*" { | ||
Line 19: | Line 18: | ||
listen on * tls port 443 | listen on * tls port 443 | ||
tls { | tls { | ||
- | certificate "/etc/ssl/bnc3.ircnow.org.fullchain.pem" | + | certificate "/etc/ssl/git.ircnow.org.fullchain.pem" |
- | key "/etc/ssl/private/bnc3.ircnow.org.key" | + | key "/etc/ssl/private/git.ircnow.org.key" |
} | } | ||
location "/.well-known/acme-challenge/*" { | location "/.well-known/acme-challenge/*" { | ||
Line 36: | Line 35: | ||
fastcgi socket "/run/slowcgi.sock" | fastcgi socket "/run/slowcgi.sock" | ||
} | } | ||
+ | |||
+ | </code> | ||
+ | |||
+ | Unconfirmed: you may need 'no fastcgi' inside the acme block to enable renewal of certs. | ||
+ | |||
+ | Make sure also to edit /var/www/conf/cgitrc: | ||
+ | <code> | ||
</code> | </code> |