This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
openbsd:www:cgit [2019/12/02 08:20] jrmu |
openbsd:www:cgit [2019/12/02 10:10] (current) jrmu |
||
|---|---|---|---|
| Line 18: | Line 18: | ||
| listen on * tls port 443 | listen on * tls port 443 | ||
| tls { | tls { | ||
| - | certificate "/etc/ssl/bnc3.ircnow.org.fullchain.pem" | + | certificate "/etc/ssl/git.ircnow.org.fullchain.pem" |
| - | key "/etc/ssl/private/bnc3.ircnow.org.key" | + | key "/etc/ssl/private/git.ircnow.org.key" |
| } | } | ||
| location "/.well-known/acme-challenge/*" { | location "/.well-known/acme-challenge/*" { | ||
| Line 35: | Line 35: | ||
| fastcgi socket "/run/slowcgi.sock" | fastcgi socket "/run/slowcgi.sock" | ||
| } | } | ||
| + | |||
| + | </code> | ||
| + | |||
| + | Unconfirmed: you may need 'no fastcgi' inside the acme block to enable renewal of certs. | ||
| + | |||
| + | Make sure also to edit /var/www/conf/cgitrc: | ||
| + | <code> | ||
| </code> | </code> | ||