3CX LetsEncrypt autorenewal

[VUSALDADASHOV]

Hello
I have read dozen of materials in internet, but at the decided to ask you here

I have on-Premise 3CX on debian with custom domain like pbx.domain.tld
I have letsencrypt Certificate in /var/lib/3cxpbx/Bin/nginx/conf/Instance1
Is here any official way to update certificate automatically ?

I'm gonna change contents of 2 diles within above mentioned directory
or can I use certbot?

 

[SweetAction]

Hello
I have read dozen of materials in internet, but at the decided to ask you here

I have on-Premise 3CX on debian with custom domain like pbx.domain.tld
I have letsencrypt Certificate in /var/lib/3cxpbx/Bin/nginx/conf/Instance1
Is here any official way to update certificate automatically ?

I'm gonna change contents of 2 diles within above mentioned directory
or can I use certbot?

Officially no.

I would write a small script to sftp the files in and restart nginx personally, but that's me. You could do a bunch of unsupported stuff like installing certbot as well, but all of this is... unsupported.

 

[greychain]

I am running certbot and it works, however I am running my 443 and 80 ports behind a SNI proxy and for certbot to automatically updated the certs I need to change my firewall to forward 443 and 80 (might not need both, never tested) directly to my 3cx server

 

[VUSALDADASHOV]

I am running certbot and it works, however I am running my 443 and 80 ports behind a SNI proxy and for certbot to automatically updated the certs I need to change my firewall to forward 443 and 80 (might not need both, never tested) directly to my 3cx server

I have same situation
But I dont bother myself with this kinda changes
i do just export .pem cert and import it to 3CX

 

[greychain]

I am running certbot and it works

 

[TheodorosG_3CX]

There is no official solution for custom certificates. You should consider using a 3CX FQDN to avoid this situation.

 

[RobG]

This worked fine for me yesterday:

https://www.3cx.com/community/threads/letsencrypt-with-custom-fqdn-debian-iso.73484/

I just now need to add a cron task to auto update and restart nginx on successful renew

 

[TheodorosG_3CX]

Glad to know this is resolved. As suggested though with 3CX FQDN you will not have this problem.

 

[greychain]

This worked fine for me yesterday:

https://www.3cx.com/community/threads/letsencrypt-with-custom-fqdn-debian-iso.73484/

I just now need to add a cron task to auto update and restart nginx on successful renew

Have you tried to do this on V20 yet?