CertBot
Obtain or renew a certificate, but do not install it
docker run -it --rm --user 0:0 \
-v /srv/docker/certbot/letsencrypt:/etc/letsencrypt \
-v /srv/docker/certbot/letsencrypt:/var/lib/letsencrypt \
-v /srv/docker/certbot/letsencrypt-log:/var/log/letsencrypt \
-v /srv/docker/nginx/html/cert:/data/letsencrypt \
certbot/certbot:latest certonly -n -m yuqienu@promadio.com --agree-tos \
--webroot --webroot-path=/data/letsencrypt \
--domains cert.promadio.com,test.promadio.com \
--cert-name promadio.com
and corresponding nginx site configuration shall be as below:
location ~/.well-known/acme-challenge/ {
root /usr/share/nginx/html/cert;
}
Display information about certificates you have from Certbot
docker run -it --rm --user 0:0 \
-v /srv/docker/certbot/letsencrypt:/etc/letsencrypt \
-v /srv/docker/certbot/letsencrypt:/var/lib/letsencrypt \
-v /srv/docker/certbot/letsencrypt-log:/var/log/letsencrypt \
-v /srv/docker/nginx/html/cert:/data/letsencrypt \
certbot/certbot:latest certificates
Renew all previously obtained certificates that are near
docker run -it --rm --user 0:0 \
-v /srv/docker/certbot/letsencrypt:/etc/letsencrypt \
-v /srv/docker/certbot/letsencrypt:/var/lib/letsencrypt \
-v /srv/docker/certbot/letsencrypt-log:/var/log/letsencrypt \
-v /srv/docker/nginx/html/cert:/data/letsencrypt \
certbot/certbot:latest renew -n --cert-name promadio.com
Deleting certificates
docker run -it --rm --user 0:0 \
-v /srv/docker/certbot/letsencrypt:/etc/letsencrypt \
-v /srv/docker/certbot/letsencrypt:/var/lib/letsencrypt \
-v /srv/docker/certbot/letsencrypt-log:/var/log/letsencrypt \
-v /srv/docker/nginx/html/cert:/data/letsencrypt \
certbot/certbot:latest delete -n --cert-name promadio.com
or to choose from a list without specifying –cert-name
Nginx plugin
docker run -it --rm --user 0:0 \
-v /srv/docker/certbot/letsencrypt:/etc/letsencrypt \
-v /srv/docker/certbot/letsencrypt:/var/lib/letsencrypt \
-v /srv/docker/certbot/letsencrypt-log:/var/log/letsencrypt \
certbot/certbot:latest --nginx
The requested nginx plugin does not appear to be installed with the docker image.