diff --git a/installer.sh b/installer.sh index cadc11f..231b6de 100644 --- a/installer.sh +++ b/installer.sh @@ -217,18 +217,18 @@ useradd -u 5000 -g vmail -s /usr/sbin/nologin -d /var/mail/vmail -m vmail ##-------------## # Certbot # ##-------------## -#add-apt-repository ppa:certbot/certbot -y -#apt install -y python-certbot-nginx -#mkdir -p /etc/letsencrypt/live/$domain/ -#certbot --nginx -n -d "$domain" -m "$email" --hsts --redirect --no-eff-email --agree-tos -#echo "certbot --nginx -n -d $domain -m $email --hsts --redirect --no-eff-email --agree-tos" > ~/certbotactivate.sh -#bash ~/certbotactivate.sh -#sed -i 's/ssl ipv6only/ssl http2 ipv6only/g' /etc/nginx/sites-available/"$domain" -#sed -i 's/listen 443 ssl/listen 443 ssl http2/g' /etc/nginx/sites-available/"$domain" -#sed -i 's#include /etc/letsencrypt/options-ssl-nginx.conf;#ssl_ciphers EECDH+CHACHA20:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;#g' /etc/nginx/sites-available/"$domain" -#openssl dhparam -out /etc/ssl/certs/dhparam.pem "$dhparam" -#chmod 755 -R /etc/ssl/certs/dhparam.pem -#systemctl restart nginx +add-apt-repository ppa:certbot/certbot -y +apt install -y python-certbot-nginx +mkdir -p /etc/letsencrypt/live/$domain/ +certbot --nginx -n -d "$domain" -m "$email" --hsts --redirect --no-eff-email --agree-tos +echo "certbot --nginx -n -d $domain -m $email --hsts --redirect --no-eff-email --agree-tos" > ~/certbotactivate.sh +bash ~/certbotactivate.sh +sed -i 's/ssl ipv6only/ssl http2 ipv6only/g' /etc/nginx/sites-available/"$domain" +sed -i 's/listen 443 ssl/listen 443 ssl http2/g' /etc/nginx/sites-available/"$domain" +sed -i 's#include /etc/letsencrypt/options-ssl-nginx.conf;#ssl_ciphers EECDH+CHACHA20:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;#g' /etc/nginx/sites-available/"$domain" +openssl dhparam -out /etc/ssl/certs/dhparam.pem "$dhparam" +chmod 755 -R /etc/ssl/certs/dhparam.pem +systemctl restart nginx ##-----------------------## # Postfix Installer #