Merge pull request #45 from Xpirix/handle_ssl_cert

Handle SSL certificate renewal

Author: Xpirix

deployment/docker-compose.yml

@@ -7,7 +7,7 @@
 #
 # See accompanying Make commands for easy collectstatic etc.
 volumes:
-  postgres-data-hello:
+  postgres-data:
   db-backups:
   static-data:
   media-data:
@@ -18,7 +18,7 @@ services:
   db:
     image: kartoza/postgis:16-3.4
     volumes:
-      - postgres-data-hello:/var/lib/postgresql
+      - postgres-data:/var/lib/postgresql
       - db-backups:/backups
     environment:
       - POSTGRES_USER=${DATABASE_USERNAME}

deployment/scripts/renew-ssl.sh

@@ -0,0 +1,17 @@
+#!/usr/bin/env bash
+
+
+# Run daily on crontab e.g.
+#  Your cron job will be run at: (5 times displayed)
+#
+#    2021-11-08 11:10:00 UTC
+#    2021-11-09 11:10:00 UTC
+#    2021-11-10 11:10:00 UTC
+#    2021-11-11 11:10:00 UTC
+#    2021-11-12 11:10:00 UTC
+#    ...etc
+
+#25 11 * * * /bin/bash /home/web/QGIS-Changelog-Website/deployment/scripts/renew_ssl.sh > /tmp/ssl-renewal-logs.txt
+
+
+docker compose -f /home/web/QGIS-Changelog-Website/deployment/docker-compose.yml -f /home/web/QGIS-Changelog-Website/deployment/docker-compose.override.yml run certbot renew

deployment/sites-enabled/prod-ssl.conf

@@ -22,10 +22,7 @@ server {
     # the port your site will be served on
     listen      80;
     # the domain name it will serve for
-    server_name plugins.qgis.org;
-
-    # Redirect all HTTP traffic to HTTPS
-    return 301 https://$server_name$request_uri;
+    server_name changelog.qgis.org;
 
     charset     utf-8;
 
@@ -96,6 +93,9 @@ server {
             return 403;
         }
 
+        # Redirect all HTTP traffic to HTTPS
+        return 301 https://$server_name$request_uri;
+
         # Redirect members and certification to the new location
         include redirections.conf;
     }