Allow automatic certbot renewal by specifying a location block for the ACME challenges

memgonzales · web-flow · commit 4a1b2f1bfd8a · 2024-12-29T22:46:50.000+08:00
diff --git a/nginx-bioinfodlsu-https.conf b/nginx-bioinfodlsu-https.conf
@@ -22,7 +22,9 @@ http {
         listen 80;
         server_name ricepilaf.bioinfodlsu.com;
         server_tokens off;
-        return 301 https://ricepilaf.bioinfodlsu.com$request_uri;
+        location / {
+            return 301 https://ricepilaf.bioinfodlsu.com$request_uri;
+        }
     }
     server {
         listen 443 ssl;
@@ -40,6 +42,10 @@ http {
         location /static {
             alias /app/static;
         }
+        location /.well-known/acme-challenge/ {
+            allow all;
+            root /tmp/acme-challenge;
+        }
     }
 }
-daemon off;
+daemon off;

Original file line number	Diff line number	Diff line change
`@@ -22,7 +22,9 @@ http {`
`22`	`22`	`listen 80;`
`23`	`23`	`server_name ricepilaf.bioinfodlsu.com;`
`24`	`24`	`server_tokens off;`
`25`		`- return 301 https://ricepilaf.bioinfodlsu.com$request_uri;`
	`25`	`+ location / {`
	`26`	`+ return 301 https://ricepilaf.bioinfodlsu.com$request_uri;`
	`27`	`+ }`
`26`	`28`	`}`
`27`	`29`	`server {`
`28`	`30`	`listen 443 ssl;`
`@@ -40,6 +42,10 @@ http {`
`40`	`42`	`location /static {`
`41`	`43`	`alias /app/static;`
`42`	`44`	`}`
	`45`	`+ location /.well-known/acme-challenge/ {`
	`46`	`+ allow all;`
	`47`	`+ root /tmp/acme-challenge;`
	`48`	`+ }`
`43`	`49`	`}`
`44`	`50`	`}`
`45`		`-daemon off;`
	`51`	`+daemon off;`