/acme-linode-objectstorage

ACME ("Let's Encrypt") client for Linode Object Storage

Primary LanguagePythonMIT LicenseMIT

ACME ("Let's Encrypt") client for Linode Object Storage

Automatically provision a Linode Object Storage bucket with a Let's Encrypt certificate.

Requirements

Requires Python 3.8+ with Cryptography and Requests.

pip install cryptography requests

Usage

This assumes you have already created an Object Storage Bucket for a domain (e.g. my.bucket.domain) and configured a DNS to point to the bucket.

The bucket name and DNS name must be identical.

  1. Generate Let's Encrypt account key:

    openssl genrsa 4096 > account_key.pem
  2. Create a Linode API Personal Access Token with Read/Write permission to Object Storage.

  3. Provision a certificate for this bucket:

    export LINODE_TOKEN=...
    python3 -m acme_linode_objectstorage -k account_key.pem my.bucket.domain

    The Object Storage cluster can be specified with the --cluster flag (default: us-east-1).

    If this is the first time running the script, you will also need to include the --agree-to-terms-of-service flag to indicate agreement with the Let's Encrypt Terms of Service.

Certificates are typically valid for 90-days. This script should be re-run approximately 30-days prior to certificate expiration.

License

Licenced under the MIT License. See LICENSE for details.