We use certbot for renewing certificates. Currently certbot is installed in frontend dashboard server and backend dashboard prod server. But, we just need to use this from one place(usage from frontend dashboard is recommended).
Step 1: Run the following command in frontend dashboard server to generate new fullchain.pem and privkey.pem files
sudo certbot certonly --manual --preferred-challenges=dns --email diapertestemail@gmail.com --server https://acme-v02.api.letsencrypt.org/directory --agree-tos -d diaper.cf -d *.diaper.cf |
Step 2: Add the DNS record: TXT at Freenom. Find credentials from box in file "Login secrets".
Step 3: Copy these certs into all the following 6 servers: (Note: privkey.pem should have a permission level 600 → use chmod 600 <file-path>)
If the SSL certs are expired, there are 2 email alerts which come daily which will stop working and also the credentials will be compromised and mobile app stops to work |
Step 4: Save fullchain.pem and privkey.pem to box
See the recordings in box folder "SSL certs updation tutorial"