summaryrefslogtreecommitdiff
path: root/infra/README.md
diff options
context:
space:
mode:
authorMartin Fischer <martin@push-f.com>2021-02-28 09:18:48 +0100
committerMartin Fischer <martin@push-f.com>2021-03-03 12:52:46 +0100
commit4d43e952fff25b5b131e8699858da663a5ac2c42 (patch)
treeacff62119061480a1cd7580f25c16c539aabc2ae /infra/README.md
initial commit
Diffstat (limited to 'infra/README.md')
-rw-r--r--infra/README.md24
1 files changed, 24 insertions, 0 deletions
diff --git a/infra/README.md b/infra/README.md
new file mode 100644
index 0000000..5b76059
--- /dev/null
+++ b/infra/README.md
@@ -0,0 +1,24 @@
+# Infrastructure
+
+Let's encrypt only supports up to 100 domains
+per certificate so the country TLDs are split up
+into three files:
+
+* ccTLDs1
+* ccTLDs2
+* ccTLDs3
+
+```
+sudo certbot -d lex.surf
+sudo certbot --cert-name cc1.lex.surf $(for tld in `cat ccTLDs1`; do echo -d $tld.lex.surf; done)
+sudo certbot --cert-name cc2.lex.surf $(for tld in `cat ccTLDs2`; do echo -d $tld.lex.surf; done)
+sudo certbot --cert-name cc3.lex.surf $(for tld in `cat ccTLDs3`; do echo -d $tld.lex.surf; done)
+```
+
+Generate NGINX `server_name` rules with:
+
+```
+printf '%s' $(for tld in `cat ccTLDs2`; do echo "$tld|"; done)
+```
+
+`/var/www/lex.surf` must be a symlink pointing to this repository.