LetsEncrypt with custom FQDN (Debian ISO)

[Basetek]

Hi Folks,

This seems to come up a lot and found myself needing to do the same. We run V16 on Debian 9 ISO and it turns out it's super easy:

1. SSH to your PBX
2. Install Certbot:

   apt-get install certbot

3. If your PBX lives behind a firewall make sure you forward port 80
4. Manually request your SSL certificate without an installer:

   certbot certonly --standalone -d example.com

5. Edit your nginx config to point to the certificate files:

   nano /etc/nginx/sites-enabled/3cxpbx
   ssl_certificate /etc/letsencrypt/live/example.com/cert.pem;
   ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem;

6. Reload nginx:

   systemctl reload nginx

That should get you up and running. I also added the following to the [renewalparams] section of the certbot renewal config file /etc/letsencrypt/renewal/example.com:

deploy_hook = systemctl reload nginx

This will reload nginx after a successful certificate renewal.

HTH, Richard.

 

[seantp]

I've done the same, but let's encrypt is timing out. Spent way too much time messing with it. Did you have to add any locations in nginx for .well-known?