*** This version of Confluence is for testing only and contains a copy of content from June 29th 2026. No changes will be preserved. ***
We use certbot for renewing certificates. Currently certbot is installed in frontend dashboard server and backend dashboard prod server. But, we just need to use this from one place(usage from frontend dashboard is recommended).
Step 1: Run the following command in frontend dashboard server to generate new fullchain.pem and privkey.pem files
| Code Block | ||||
|---|---|---|---|---|
| ||||
sudo certbot certonly --manual --preferred-challenges=dns --email diapertestemail@gmail.com --server https://acme-v02.api.letsencrypt.org/directory --agree-tos -d diaper.cf -d *.diaper.cf |
Step 2: Add the DNS record: TXT at Freenom. Find credentials from box in file "Login secrets".
Step 3: Copy these certs into all the following 6 servers: (Note: privkey.pem should have a permission level 600 → use chmod 600 <file-path>)
- Frontend dashboard
- Backend dashboard prod
- Backend mobile prod
- Backend dashboard test
- Backend mobile test
- Jenkins
| Info |
|---|
If the SSL certs are expired, there are 2 email alerts which come daily which will stop working and also the credentials will be compromised and mobile app stops to work |
Step 4: Save fullchain.pem and privkey.pem to box
See the recordings in box folder "SSL certs updation tutorial"