Installing SSL on Aws Instance / Digital Ocean Droplet with letsEncrypt free SSL -- Also contains modified mup file


Installing SSL on Aws Instance / Digital Ocean Droplet with letsEncrypt free SSL & also contains modified mup file
-----------------------------------------------------------------------------------------------------------
there might come under one of these two cases when instaling SSL.

 1. installing new SSL# on your server
2. renewing your certificates.

 here we are considering that we are doing it for first time.
we assume you have installed mup already.

 # so SSl setup starts with stoping mup first

mup stop


 # then install letsencrypt from this link


git clone https://github.com/letsencrypt/letsencrypt



cd letsencrypt


# next generate the required certificates

./letsencrypt-auto certonly --standalone

 # navigate into the directory where your cert chain is located

cd /etc/letsencrypt/live/mysite.com

 # combine your cert chain with your private key

touch ssl.pem

cat fullchain.pem privkey.pem > ssl.pem



# back to your machine

# open your project directory




cd project



Next step is only required, if you haven't installed mup yet.







# configure meteor up if you haven't already



# https://github.com/arunoda/meteor-up





# move your certificates locally inside '/var/www/html/' so they dont stuck with some permision denial errors.



# include the pem file in your mup.json file




nano mup.json







//default content of mup.js file











module.exports = {



  servers: {



    one: {



      host: 'youwebsitename.com',



      username: 'ubuntu',



      password: "your ssh password"



      // or leave blank for authenticate from ssh-agent



    }



  },



meteor: {



    name: 'projectfoldername',



    path: '../../projectfoldername',



    servers: {



      one: {}



    },







//we use volumes to make ares out side excessable by Our project



    volumes: {



     '/var/www/html/uploading_server/files/': '/var/www/html/uploading_server/files/',



     '/var/www/html/uploading_server/files/': '/root/OrthancBuild2/Configuration.json'



   },











 ssl: {



   crt: "/var/www/html/fullchain.pem",



   key:"/var/www/html/privkey.pem",



   port: 443



 },















    buildOptions: {



      serverOnly: true,



    },



   



    env: {



      ROOT_URL: 'https://youwebsitename.com',



      MONGO_URL: 'mongodb://localhost/meteor'



    },







    dockerImage: 'abernix/meteord:node-8.4.0-base',



    deployCheckWaitTime: 60,



     enableUploadProgressBar: true,



  },



mongo: {



    oplog: true,



    port: 27017,



    servers: {



      one: {},



    },



  },



};









keep it in this format

# deploy


mup setup; mup deploy


































Comments









  1. HopperDecember 5, 2018 at 7:44 AM
    That I huge delight in the place. It’s rare to find Digital Ocean vs AWS beneficial financial within the lousy quite often, however , It is my opinion you’ve nailed it all! Will you thought process posting your blog and with the material?
    ReplyDelete











Post a Comment























Popular posts from this blog









Setting up Orthanc server on Ubuntu 16 





















   Setting up Orthanc server on Ubuntu 16.    # How to compile, install and run newest version of Orthanc DICOM server  # from Github source in Ubuntu 16.04 LTS  cd  sudo apt-get update  sudo apt-get install build-essential unzip cmake mercurial uuid-dev libcurl4-openssl-dev liblua5.1-0-dev libgtest-dev libpng-dev libsqlite3-dev libssl-dev libjpeg-dev zlib1g-dev libdcmtk2-dev libboost-all-dev libwrap0-dev libcharls-dev libjsoncpp-dev libpugixml-dev doxygen qupzilla  sudo rm -rf Orthanc*  sudo apt-get purge orthanc  git clone https://github.com/jodogne/OrthancMirror.git  mkdir ~/OrthancBuild  cd ~/OrthancBuild/  cmake -DSTATIC_BUILD=ON -DCMAKE_BUILD_TYPE=Release ~/OrthancMirror/  sudo make  sudo make doc  ./Orthanc --version  ./Orthanc &  qupzilla http://localhost:8042/app/explorer.html  # press ESC key twice to ignore warning messages about Mozilla Firefox  # when using the file upload function      Original Post AT:     https://mark911.wordpress.com/2016/07/13/how-to-compile-i...








Read more










How to install COMODO SSL Certificates for NGINX




















Image







   DO ALL THINGS ON LIVE NOT ON LOCAL SERVER  Setting up a SSL Cert from Comodo =================================  Step 1: Create new example key and CSR files   openssl req -new -newkey rsa:2048 -nodes -keyout example_com.key -out example_com.csr    This gives you two files:  * ``example_com.key`` -- your Private key. You'll need this later to configure ngxinx. * ``example_com.csr`` -- Your CSR file.  Now, purchase the certificate [1]_, follow the steps on their site, and you should soon get an  email with your *PositiveSSL Certificate*. It contains a zip file with the following:  * Root CA Certificate - `AddTrustExternalCARoot.crt` * Intermediate CA Certificate - `COMODORSAAddTrustCA.crt` * Intermediate CA Certificate - `COMODORSADomainValidationSecureServerCA.crt` * Your PositiveSSL Certificate - `www_example_com.crt` (or the subdomain you gave them)    DO ALL THINGS ON LIVE NOT ON LOCAL SERVER  Step 2: Go To orders, and Click on order detail and then re issuing the certificate ...








Read more










start, stop and restart Nginx (with proper installation guide for Nginx server)




















Image







  Step 1: Install Nginx   Nginx is available in Ubuntu's default repositories, so the installation is rather straight forward.   Since this is our first interaction with the  apt  packaging system in this session, we will update our local package index so that we have access to the most recent package listings. Afterwards, we can install  nginx :   sudo apt-get update  sudo apt-get install nginx     After accepting the procedure,  apt-get  will install Nginx and any required dependencies to your server.     Step 2: Adjust the Firewall   Before we can test Nginx, we need to reconfigure our firewall software to allow access to the service. Nginx registers itself as a service with  ufw , our firewall, upon installation. This makes it rather easy to allow Nginx access.   We can list the applications configurations that  ufw  knows how to work with by typing:   sudo ufw app list     You should get a listing of the application profiles:   Output  Availa...








Read more