<feed xmlns='http://www.w3.org/2005/Atom'>
<title>infra.git/roles/nginx/files/hooks/deploy, branch master</title>
<subtitle>Ansible playbooks for personal infrastructure.</subtitle>
<id>https://git.ilvokhin.com/infra.git/atom?h=master</id>
<link rel='self' href='https://git.ilvokhin.com/infra.git/atom?h=master'/>
<link rel='alternate' type='text/html' href='https://git.ilvokhin.com/infra.git/'/>
<updated>2024-04-14T18:27:14Z</updated>
<entry>
<title>Make certificate updates work for nginx</title>
<updated>2024-04-14T18:27:14Z</updated>
<author>
<name>Dmitry Ilvokhin</name>
<email>d@ilvokhin.com</email>
</author>
<published>2024-04-14T18:27:14Z</published>
<link rel='alternate' type='text/html' href='https://git.ilvokhin.com/infra.git/commit/?id=899eca5f024f22b67aa032dd82aa4393b60b85e4'/>
<id>urn:sha1:899eca5f024f22b67aa032dd82aa4393b60b85e4</id>
<content type='text'>
Currently, we obtain certificates from Let's Encrypt with standalone
mode, so when we do renew, certbot tries to run it is own webserver on
port 80, but this port is already in use by nginx.

Stop nginx, before renewal. This is quite hacky, but should work. Proper
solution is to split certificate role by standalone and non-standalone
versions.
</content>
</entry>
</feed>
