Merge pull request #76 from Xpirix/handle_ssl_cert

Handle SSL certificate renewal

Author: Xpirix

deployment/scripts/renew-ssl.sh

@@ -0,0 +1,17 @@
+#!/usr/bin/env bash
+
+
+# Run daily on crontab e.g.
+#  Your cron job will be run at: (5 times displayed)
+#
+#    2021-11-08 11:10:00 UTC
+#    2021-11-09 11:10:00 UTC
+#    2021-11-10 11:10:00 UTC
+#    2021-11-11 11:10:00 UTC
+#    2021-11-12 11:10:00 UTC
+#    ...etc
+
+#25 11 * * * /bin/bash /home/web/QGIS-Certification-Website/deployment/scripts/renew_ssl.sh > /tmp/ssl-renewal-logs.txt
+
+
+docker compose -f /home/web/QGIS-Certification-Website/deployment/docker-compose.yml -f /home/web/QGIS-Certification-Website/deployment/docker-compose.override.yml run certbot renew

deployment/sites-enabled/prod-ssl.conf

@@ -22,10 +22,7 @@ server {
     # the port your site will be served on
     listen      80;
     # the domain name it will serve for
-    server_name plugins.qgis.org;
-
-    # Redirect all HTTP traffic to HTTPS
-    return 301 https://$server_name$request_uri;
+    server_name certification.qgis.org;
 
     charset     utf-8;
 
@@ -96,6 +93,9 @@ server {
             return 403;
         }
 
+        # Redirect all HTTP traffic to HTTPS
+        return 301 https://$server_name$request_uri;
+
         # Redirect planet and hub resources to the new location
         include redirections.conf;
     }
@@ -230,4 +230,4 @@ server {
   	}
 
     root /var/www/webroot;
-}
+}