let's encrypt certification / renew with docker

letsencript_docker.md

new

sudo docker run -it --rm --name certbot \
  -v '/etc/letsencrypt:/etc/letsencrypt' \
  -v '/var/lib/letsencrypt:/var/lib/letsencrypt' \
  certbot/certbot certonly -d '*.myDomain.com' --manual --preferred-challenges dns --server https://acme-v02.api.letsencrypt.org/directory

renew

sudo docker run -it --rm --name certbot \
  -v '/etc/letsencrypt:/etc/letsencrypt' \
  -v '/var/lib/letsencrypt:/var/lib/letsencrypt' \
  certbot/certbot renew --manual --preferred-challenges dns --server https://acme-v02.api.letsencrypt.org/directory

delete certificate

sudo rm -rf /etc/letsencrypt/
sudo rm -rf /var/lib/letsencrypt/

original source

https://lynlab.co.kr/blog/72

issues

• wildcard domain (ex. *.myDomain.com) may not work with renew docker but need to get re-certification manually.
• There commands need root permission.