2 LETSENCRYPT_DIR: "/shared/letsencrypt"
8 - cd /root && git clone https://github.com/Neilpang/le.git
9 - touch /var/spool/cron/crontabs/root
10 - install -d -m 0755 -g root -o root $LETSENCRYPT_DIR
11 - cd /root/le && LE_WORKING_DIR="${LETSENCRYPT_DIR}" ./le.sh install
14 path: /etc/runit/1.d/letsencrypt
19 LE_WORKING_DIR="$$ENV_LETSENCRYPT_DIR" $$ENV_LETSENCRYPT_DIR/le.sh issue no $$ENV_DISCOURSE_HOSTNAME no 4096
20 LE_WORKING_DIR="$$ENV_LETSENCRYPT_DIR" $$ENV_LETSENCRYPT_DIR/le.sh installcert $$ENV_DISCOURSE_HOSTNAME /shared/ssl/$$ENV_DISCOURSE_HOSTNAME.cer /shared/ssl/$$ENV_DISCOURSE_HOSTNAME.key /shared/ssl/$$ENV_DISCOURSE_HOSTNAME.cer "sv reload nginx"
21 # After the initial install, switch to Webroot plugin
22 LE_WORKING_DIR="$$ENV_LETSENCRYPT_DIR" $$ENV_LETSENCRYPT_DIR/le.sh _setopt $$ENV_LETSENCRYPT_DIR/$$ENV_DISCOURSE_HOSTNAME/$$ENV_DISCOURSE_HOSTNAME.conf "Le_Webroot" "=" "/var/www/discourse/public"
25 filename: "/etc/nginx/conf.d/discourse.conf"
26 from: /ssl_certificate.+/
28 ssl_certificate /shared/ssl/$$ENV_DISCOURSE_HOSTNAME.cer;
31 filename: "/etc/nginx/conf.d/discourse.conf"
32 from: /ssl_certificate_key.+/
34 ssl_certificate_key /shared/ssl/$$ENV_DISCOURSE_HOSTNAME.key; # remember the certificate for 2 months and automatically connect to HTTPS for this domain
37 filename: "/etc/nginx/conf.d/discourse.conf"
40 add_header Strict-Transport-Security 'max-age=5184000';