Install SSL Certificate

Important

These instructions related to manually obtained SSL certificates. To use lets encrypt certificates see Obtain and configure ssl certificate on nginx with letsencrypt

To create a certificate, see Create SSL Certificate…

Configuration

The following task expects the certificate to be in a folder for the domain within a folder called ssl-cert which is placed beside the pillar folder. See Site - Configuration for details…

Make sure the Salt pillar is configured correctly for the site. You need to set ssl to True and the domain must match the certificate e.g:

domain: hatherleigh.info
ssl: True

Important

If you are using Mailgun, then don’t forget to update the route to use https rather than http.

Usage

To copy an SSL certificate to a cloud server run this from the fabric folder:

fab domain:www.hatherleight.info ssl

Note

These tasks will ask you to enter the sudo password for the user on the server.

Note

This task expects the /srv/ folder to exist on the server. I don’t know what creates the folder… so I am currently not sure how it gets there!

To update an existing certificate:

ssh hatherleigh_info
sudo -i
service nginx restart

To add a new first certificate run:

salt 'drop-temp' state.apply --state-verbose=False

for your server so the site is set-up correctly for SSL.