git clone https://github.com/acmesh-official/acme.sh.git
cd ./acme.sh
./acme.sh --install -m [EMAIL]
.acme.sh/acme.sh --register-account -m [EMAIL]
Needs root to start a server on port 80
.acme.sh/acme.sh --issue --standalone -d [DOMAIN]
Create a personal access token with permissions to "Manage domain name technical configurations"
export GANDI_LIVEDNS_TOKEN="[Personal Access Token]"
Warning: export GANDI_LIVEDNS_KEY="[API KEY]"
is deprecated
.acme.sh/acme.sh --issue --dns dns_gandi_livedns -d [DOMAIN]
Make sure to create the /etc/acme-sh/(url)
directory
export url=[URL] \
&& mkdir -p /etc/acme-sh/{$url} \
&& .acme.sh/acme.sh --install-cert -d $url \
--key-file /etc/acme-sh/{$url}/key.pem \
--fullchain-file /etc/acme-sh/{$url}/cert.pem \
--reloadcmd "sudo systemctl restart nginx"
/etc/systemd/system/acme-sh.service
[Unit]
Description=Renew certificates using acme.sh
After=network-online.target
[Service]
Type=oneshot
ExecStart=(path to acme.sh) --cron --home (path to acme folder)
User=wiki
SuccessExitStatus=0 2
/etc/systemd/system/acme-sh.timer
[Unit]
Description=Daily renewal of certificates
[Timer]
OnCalendar=daily
RandomizedDelaySec=1h
Persistent=true
[Install]
WantedBy=timers.target
Enable timer
systemctl enable --now acme-sh.timer