[ubuntu] LetsEncrypt Apache Postfix and Webmin

[k-strider]

my certificate was due to expire soon so i wanted to use LetsEncrypt certificate going forwards i used to use StartCom but now they have been distrusted by Mozilla Apple and Google i need a new cert supplier.

i needed it to work with Postfix and ideally webmin too, given the short life of the certificates i really needed it all to be automated...

 

i basically followed this https://www.digitalocean.com/community/tutorials/how-to-secure-apache-with-let-s-encrypt-on-ubuntu-14-04

this sorted out my websites i have about 5 domains running on Apache.

 

to get Postfix to use the certificate i basically followed this:

https://ubuntu101.co.za/ssl/postfix-and-dovecot-on-ubuntu-with-a-lets-encrypt-ssl-certificate/

 

its good that certbot always puts the certificate in the same place so you can just point Postfix and Webmin to it...

/etc/letsencrypt/live/my.domain.name/fullchain.pem

/etc/letsencrypt/live/my.domain.name/privkey.pem

and for SAN certificates they just all go in the first domain specified which is good

 

the only thing i did ontop of the two guides was to change the cron job so that all three services got restarted not just Apache on certificate renewal...

this is the line i put in my cron job

30 2 * * 1 /usr/local/sbin/certbot-auto renew >> /var/log/certbot-renew.log && sudo service apache2 reload && sudo service postfix reload && sudo service webmin stop && sudo service webmin start

 

Edited February 10, 2017 by k-strider