diff --git a/linux/letsencrypt/acme-sh.md b/linux/letsencrypt/acme-sh.md index 2fdfc72..46510a1 100644 --- a/linux/letsencrypt/acme-sh.md +++ b/linux/letsencrypt/acme-sh.md @@ -31,15 +31,11 @@ where `protocol` is `--standalone` if you want to use port 80, or `--alpn` if yo ## deploy -once the certificate has been successfully issued, we still have to deploy it to our server. First, make sure the certs path exists, and set the appropriate variables to tell `acme.sh` where to deploy certificates: +once the certificate has been successfully issued, we still have to deploy it to our server. First, make sure the certs path exists, and then set the appropriate variables to tell `acme.sh` where to deploy certificates and deploy the certificates: ``` mkdir -p /etc/haproxy/certs -export DEPLOY_HAPROXY_PEM_PATH=/etc/haproxy/certs -export DEPLOY_HAPROXY_RELOAD="/usr/sbin/service haproxy reload" -``` -finally, deploy the certificate with: -``` -acme.sh --deploy -d --deploy-hook haproxy -d ${domain:?} +DEPLOY_HAPROXY_PEM_PATH=/etc/haproxy/certs DEPLOY_HAPROXY_RELOAD="/usr/sbin/service haproxy reload" \ + acme.sh --deploy --deploy-hook haproxy -d ${domain:?} ``` acme.sh should automatically configure reneweal of certificates and deployment of renewed certificates.