XaviTorello

Let's Encrypt on Ubuntu 14.04, nginx with webroot auth

This document details how I setup LE on my server. Firstly, install the client as described on http://letsencrypt.readthedocs.org/en/latest/using.html and make sure you can execute it. I put it in /root/letsencrypt.

As it is not possible to change the ports used for the standalone authenticator and I already have a nginx running on port 80/443, I opted to use the webroot method for each of my domains (note that LE does not issue wildcard certificates by design, so you probably want to get a cert for www.example.com and example.com).

Configuration

For this, I placed config files into etc/letsencrypt/configs, named after <domain>.conf. The files are simple:

XaviTorello

import struct
from binascii import b2a_base64 as e64
from binascii import a2b_base64 as d64
import scrypt
import Crypto.Random
random = Crypto.Random.new().read
from passlib.utils import consteq

_PARAMS = struct.Struct("!BBBB")

XaviTorello

#!/bin/bash

# Call it with $ ./hipchat-v2.sh "MESSGE" [STATUS | NOTIFICATION_TYPE]
#    , optional parameters 
#        STATUS = 'w|c|o|u'
#        NOTIFICATION_TYPE = "PROBLEM|RECOVERY|FLAPPING*|DOWNTIME*"
#
# Set the ROOM_ID & AUTH_TOKEN variables below.
# Ready to be integrated on Shinken / Nagios / Centreon as a new notification system
# Further instructions at https://www.hipchat.com/docs/apiv2/auth

XaviTorello

sudo apt-get update

sudo apt-get install python-virtualenv
sudo apt-get install python-dev
sudo apt-get install postgresql
sudo apt-get install postgresql-server-dev-9.3
sudo apt-get install redis-server

sudo -u postgres createuser -s sentry
sudo -u postgres psql -c "alter user sentry with password 'sentry';"