Difference between revisions of "Poddery - Diaspora, Matrix and XMPP"

Line 164: Line 164:
=== SSL/TLS certificates ===
=== SSL/TLS certificates ===


  # letsencrypt certonly --webroot -w /usr/share/diaspora/public  -d poddery.com -d www.poddery.com -d test.poddery.com -d groups.poddery.com -w /usr/share/diaspora/public/save -d save.poddery.com
  # letsencrypt certonly --webroot -w /usr/share/diaspora/public  -d poddery.com -d www.poddery.com -d test.poddery.com -d groups.poddery.com -w /usr/share/diaspora/public/save -d save.poddery.com -w /var/www/riot -d chat.poddery.com
 
  # cp  -L /etc/letsencrypt/live/poddery.com/fullchain.pem /etc/diaspora/ssl/poddery.com-bundle.pem
  # cp  -L /etc/letsencrypt/live/poddery.com/fullchain.pem /etc/diaspora/ssl/poddery.com-bundle.pem
  # cp -L /etc/letsencrypt/live/poddery.com/privkey.pem /etc/diaspora/ssl/poddery.com.key
  # cp -L /etc/letsencrypt/live/poddery.com/privkey.pem /etc/diaspora/ssl/poddery.com.key
Line 170: Line 171:
  # chmod g+r -R /etc/letsencrypt
  # chmod g+r -R /etc/letsencrypt
  # chmod g+x /etc/letsencrypt/*
  # chmod g+x /etc/letsencrypt/*
Make sure the certificates used by prosody are symbolic links to letsencrypt default location.


  # ls -l /etc/prosody/certs/
  # ls -l /etc/prosody/certs/