/manual-letsencrypt

Primary LanguageHCL

Manual Letsencrypt

This repo has been created historically to generate letsencrypt certs for a domain, and then it has been used only for the purpose of keeping a secured domain(fakeservices.datajoint.io) for internal development.

Previously to get the letsencrypt certs, you need to:

  • Create an EC2 instance, create a Route 53 record to point to the instance
  • SSH into the instance, install docker, clone this repo, start docker compose to get the certs
  • Delete the Route 53 record
  • When renewing certs, you need to repeat the above steps(the instance can be kept and stopped)

Since this is a repeating manual process, we want to automate it by using terraform(the above manual step still works).

  • In the terraform directory, make .env file and input.tfvars file from the example files
  • run
set -a && souce .env && set +a
terraform init
terraform plan # double check
terraform apply -var-file="input.tfvars" 
# enter yes
  • to get certs
scp -i <key> -r ubuntu@<ip>:/manual-letsencrypt/letsencrypt-key/live/<domain> .
  • to tear down(please don't forget to do this)
terraform destroy -var-file="input.tfvars" 
# enter yes