diff options
| author | EuAndreh <eu@euandre.org> | 2020-08-15 20:07:53 -0300 |
|---|---|---|
| committer | EuAndreh <eu@euandre.org> | 2020-08-16 06:13:21 -0300 |
| commit | ceccb9946e2487468135ce673235aa079780a943 (patch) | |
| tree | a969c63e7fd0f555a88b13328251602ae9bded72 /TODOs.org | |
| parent | Use letsencrypt to generate the TLS certificate (diff) | |
| download | server-ceccb9946e2487468135ce673235aa079780a943.tar.gz server-ceccb9946e2487468135ce673235aa079780a943.tar.xz | |
Use NGINX to handle the creation of certificates for prosody
After a terraform state rm '...' of the server and domain configuration, and
recreating the instance again while leaving the dettached one running.
I had to do this because I was experimenting too much with the domain and I hit
the Let's Encrypt rate limit[0].
Because of that I'll recreate certificates less often so that doesn't happen in
the new domain during development of the VPS.
I'm not shure if this solution works, but I'll commit just as a checkpoint. I
had to change the custom DNS nameservers from Digital Ocean to Vultr and that
may take a while, so it's worth having this as a checkpoint in time while I'm
off to other things.
[0]: https://letsencrypt.org/docs/rate-limits/
Diffstat (limited to '')
| -rw-r--r-- | TODOs.org | 2 |
1 files changed, 2 insertions, 0 deletions
@@ -158,4 +158,6 @@ This way we test the DNS A record -> Floating IP -> Droplet IP path. We can't do We could use the raw Droplet IP instead of the DNS A record, but I prefer calling it later in order to always test the full DNS resolution. * Questions ** How to best handle IP changes when the server changes? How does this affect the email sending IP reputation? +** Enable 2FA for Nextcloud? +Do XMPP support that too? * Scrath |