Certbot
Here is the log for running certbot on andromeda. It parses the nginx file and automatically finds the other name. Make sure the external DNS and port forwards are setup and working first.
venture@andromeda:~$ sudo certbot --nginx run
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Which names would you like to activate HTTPS for?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1: bcheckviewer.ventureresearch.com < found it automatically
2: ciminterface.ventureresearch.com
3: andromeda.crm.ventureresearch.com
4: deviceconnect-dev.ventureresearch.com
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Select the appropriate numbers separated by commas and/or spaces, or leave input
blank to select all options shown (Enter 'c' to cancel): <hit enter> < leave blank and hit enter
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
You have an existing certificate that contains a portion of the domains you
requested (ref: /etc/letsencrypt/renewal/ciminterface.ventureresearch.com.conf)
It contains these names: ciminterface.ventureresearch.com,
andromeda.crm.ventureresearch.com, deviceconnect-dev.ventureresearch.com
You requested these names for the new certificate:
bcheckviewer.ventureresearch.com, ciminterface.ventureresearch.com,
andromeda.crm.ventureresearch.com, deviceconnect-dev.ventureresearch.com.
Do you want to expand and replace this existing certificate with the new
certificate?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
(E)xpand/(C)ancel: E < E to expand the cert, and that's it
Renewing an existing certificate for bcheckviewer.ventureresearch.com and 3 more domains
Successfully received certificate.
Certificate is saved at: /etc/letsencrypt/live/ciminterface.ventureresearch.com/fullchain.pem
Key is saved at: /etc/letsencrypt/live/ciminterface.ventureresearch.com/privkey.pem
This certificate expires on 2021-12-23.
These files will be updated when the certificate renews.
Certbot has set up a scheduled task to automatically renew this certificate in the background.
Deploying certificate
Successfully deployed certificate for bcheckviewer.ventureresearch.com to /etc/nginx/sites-enabled/default
Successfully deployed certificate for ciminterface.ventureresearch.com to /etc/nginx/sites-enabled/default
Successfully deployed certificate for andromeda.crm.ventureresearch.com to /etc/nginx/sites-enabled/default
Successfully deployed certificate for deviceconnect-dev.ventureresearch.com to /etc/nginx/sites-enabled/default
Your existing certificate has been successfully renewed, and the new certificate has been installed.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
If you like Certbot, please consider supporting our work by:
* Donating to ISRG / Let's Encrypt: https://letsencrypt.org/donate
* Donating to EFF: https://eff.org/donate-le
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
venture@andromeda:~$