Skip to content

Example config files.

Jump to bottom
Tim Kimber edited this page Sep 10, 2020 · 6 revisions

Config for example.com and www.example.com on the same server.

~/.getssl/example.com/getssl.cfg

# uncomment and modify any variables you need
# The staging server is best for testing
CA="https://acme-staging-v02.api.letsencrypt.org"
# This server issues full certificates, however has rate limits
#CA="https://acme-v02.api.letsencrypt.org"

# additional domains - this could be multiple domains / subdomains in a comma separated list
SANS="www.example.com"

#Acme Challenge Location.   The first line for the domain, the following ones for each additional domain
ACL=('/var/www/example.com/web/.well-known/acme-challenge')

USE_SINGLE_ACL="true"

DOMAIN_CERT_LOCATION="/etc/ssl/example.com.crt"
DOMAIN_KEY_LOCATION="/etc/ssl/example.com.key"
CA_CERT_LOCATION="/etc/ssl/example.com.bundle"

RELOAD_CMD="service apache2 reload"

Config for example.com and www.example.com on a server remote to getssl

~/.getssl/example.com/getssl.cfg

# uncomment and modify any variables you need
# The staging server is best for testing
CA="https://acme-staging-v02.api.letsencrypt.org"
# This server issues full certificates, however has rate limits
#CA="https://acme-v02.api.letsencrypt.org"

# additional domains - this could be multiple domains / subdomains in a comma separated list
SANS="www.example.com"

#Acme Challenge Location.   The first line for the domain, the following ones for each additional domain
ACL=('ssh:[email protected]:/var/www/example.com/web/.well-known/acme-challenge')

USE_SINGLE_ACL="true"

DOMAIN_CERT_LOCATION="ssh:[email protected]:/etc/ssl/example.com.crt"
DOMAIN_KEY_LOCATION="ssh:[email protected]:/etc/ssl/example.com.key"
CA_CERT_LOCATION="ssh:[email protected]:/etc/ssl/example.com.bundle"

RELOAD_CMD="ssh [email protected] service apache2 reload"

Config for example.com, www.example.com and another-domain.com on the same server.

~/.getssl/example.com/getssl.cfg

# uncomment and modify any variables you need
# The staging server is best for testing
CA="https://acme-staging-v02.api.letsencrypt.org"
# This server issues full certificates, however has rate limits
#CA="https://acme-v02.api.letsencrypt.org"

# additional domains - this could be multiple domains / subdomains in a comma separated list
SANS="www.example.com, another-domain.com, www.another-domain.com"

#Acme Challenge Location.   The first line for the domain, the following ones for each additional domain
ACL=('/var/www/example.com/web/.well-known/acme-challenge'
     '/var/www/example.com/web/.well-known/acme-challenge'
     '/var/www/another-domain.com/web/.well-known/acme-challenge'
     '/var/www/another-domain.com/web/.well-known/acme-challenge' )

DOMAIN_CERT_LOCATION="/etc/ssl/example.com.crt"
DOMAIN_KEY_LOCATION="/etc/ssl/example.com.key"
CA_CERT_LOCATION="/etc/ssl/example.com.bundle"

RELOAD_CMD="service apache2 reload"
Clone this wiki locally