Update 'installer.sh'

This commit is contained in:
b.waal
2019-08-31 16:04:09 +02:00
parent 00f8db9764
commit 929bdf85b0

View File

@@ -217,20 +217,18 @@ useradd -u 5000 -g vmail -s /usr/sbin/nologin -d /var/mail/vmail -m vmail
##-------------## ##-------------##
# Certbot # # Certbot #
##-------------## ##-------------##
echo "Certbot" #add-apt-repository ppa:certbot/certbot -y
#apt install -y python-certbot-nginx
add-apt-repository ppa:certbot/certbot -y #mkdir -p /etc/letsencrypt/live/$domain/
apt install -y python-certbot-nginx #certbot --nginx -n -d "$domain" -m "$email" --hsts --redirect --no-eff-email --agree-tos
mkdir -p /etc/letsencrypt/live/$domain/ #echo "certbot --nginx -n -d $domain -m $email --hsts --redirect --no-eff-email --agree-tos" > ~/certbotactivate.sh
certbot --nginx -n -d "$domain" -m "$email" --hsts --redirect --no-eff-email --agree-tos #bash ~/certbotactivate.sh
echo "certbot --nginx -n -d $domain -m $email --hsts --redirect --no-eff-email --agree-tos" > ~/certbotactivate.sh #sed -i 's/ssl ipv6only/ssl http2 ipv6only/g' /etc/nginx/sites-available/"$domain"
bash ~/certbotactivate.sh #sed -i 's/listen 443 ssl/listen 443 ssl http2/g' /etc/nginx/sites-available/"$domain"
sed -i 's/ssl ipv6only/ssl http2 ipv6only/g' /etc/nginx/sites-available/"$domain" #sed -i 's#include /etc/letsencrypt/options-ssl-nginx.conf;#ssl_ciphers EECDH+CHACHA20:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;#g' /etc/nginx/sites-available/"$domain"
sed -i 's/listen 443 ssl/listen 443 ssl http2/g' /etc/nginx/sites-available/"$domain" #openssl dhparam -out /etc/ssl/certs/dhparam.pem "$dhparam"
sed -i 's#include /etc/letsencrypt/options-ssl-nginx.conf;#ssl_ciphers EECDH+CHACHA20:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;#g' /etc/nginx/sites-available/"$domain" #chmod 755 -R /etc/ssl/certs/dhparam.pem
openssl dhparam -out /etc/ssl/certs/dhparam.pem "$dhparam" #systemctl restart nginx
chmod 755 -R /etc/ssl/certs/dhparam.pem
systemctl restart nginx
##-----------------------## ##-----------------------##
# Postfix Installer # # Postfix Installer #