Use Let's Encrypt on devilbox

[robsoned]

ISSUE TYPE

• Feature request

SUMMARY

Use Let's Encrypt on production for a single website at least.

Goal

I'm using devilbox on production, and I've been struggling to install Let's Encrypt work on it. There's a third party project on the documentation that is supposed to do it, but its documentation is not very helpful.

Thanks a lot for the project!

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[cytopia]

@robsoned I haven't tried letsencrypt myself that's why I've linked the third-party. At what steps are you struggling?

[robsoned]

Hello @cytopia! I was trying to run a Laravel application on production. I tried to follow some guides but I don't remember exactly where the installation fails.

but this one seems to be the most accurate guide.
https://tecadmin.net/install-lets-encrypt-create-ssl-ubuntu/

I will try to reproduce the error this week and come back with more precise information about it. Thank you!

[creactiv]

I came over this in another project, not using devilbox, and found out, that you can use for this the certbot package in Ubuntu / Debian (this are the OS i am some kind of familiar with), Using nginx, there is also a separate package for certbot with nginx. I made it happen somehow with addning

apt-get install python-certbot-nginx
and then:

certbot --nginx

then it will list all of your domains you are running and gives you the option to create certs for all of them or only for some of them. Even better: it also updates the conf files within nginx

Perhaps this might help a bit...

[science695]

FYI: the main way this works is by the certbot temporarily taking over the webserver and serving a token file while Let's Encrypt attempts to hit your server from the internet.

TLDR: it doesn't work easily if your docker containers don't have public dns or public accessibility (which most local dev environments do not).

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[science695]

@cytopia You can install certbot, and run a command and it will place challenge files in the docroot, do a handshake with letsencrypt and then retrieve a certificate. If you ran this on startup, it would check expiration dates and renew if needed.

Here is a configuration reference for one of the modes that could be helpful:
https://certbot.eff.org/docs/using.html#webroot

[cytopia]

@science695 I can ship certbot with the PHP-FPM images. Additionally a how-to is already available via the docs from another user. As the rest of the feature goes a bit out of scope for a development environment, I will only accept PR's for the rest of the features. Will leave this open until certbot is shipped :)

[science695]

@cytopia Sorry, didn't mean to bump a stale topic, just saw the help wanted tag from earlier.

[cytopia]

certbot will be shipped with this release: devilbox/docker-php-fpm#159

[cytopia]

certbot is now available in v1.7.1

[shivam5th]

Follow this guide to install Let's Encrypt SSL on Ubuntu 20.04