Bypass basic auth for letsencrypt acme requests, reload nginx after ssl renewals

This commit is contained in:
Jamie Curnow
2018-03-16 10:53:50 +10:00
parent b324110c49
commit 36896bcfc9
3 changed files with 11 additions and 7 deletions

View File

@ -2,6 +2,7 @@
# We use ^~ here, so that we don't check other regexes (for speed-up). We actually MUST cancel
# other regex checks, because in our other config files have regex rule that denies access to files with dotted names.
location ^~ /.well-known/acme-challenge/ {
auth_basic off;
# Set correct content type. According to this:
# https://community.letsencrypt.org/t/using-the-webroot-domain-verification-method/1445/29
@ -14,7 +15,7 @@ location ^~ /.well-known/acme-challenge/ {
# there to "webroot".
# Do NOT use alias, use root! Target directory is located here:
# /var/www/common/letsencrypt/.well-known/acme-challenge/
root /config/letsencrypt-acme-challenge;
root /config/letsencrypt-acme-challenge;
}
# Hide /acme-challenge subdirectory and return 404 on all requests.