User Tools

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

manual_certificate_update [2026/10/28 15:24] – created deftespritmanual_certificate_update [2026/10/28 15:24] (current) – deftesprit
Line 1: Line 1:
 ====== Manual Certificate update ====== ====== Manual Certificate update ======
 <code>sudo certbot certonly --manual --preferred-challenges dns -d mail.netsec.pro</code> <code>sudo certbot certonly --manual --preferred-challenges dns -d mail.netsec.pro</code>
 +Certbot will show a TXT record name and value to add at your DNS provider. Add it, wait for it to appear in public DNS, then continue the Certbot prompt. Manual DNS renewals require repeating that process each time; for automatic renewal, use a Certbot DNS plugin for your DNS provider.
 +
 +Then configure Postfix and Dovecot to use the resulting fullchain.pem and privkey.pem files for that certificate, and reload them. If the mail server can serve the ACME HTTP challenge directly on port 80, another option is Certbot’s webroot authenticator—but DNS-01 avoids involving the web proxy.

This website uses cookies. By using the website, you agree with storing cookies on your computer. Also, you acknowledge that you have read and understand our Privacy Policy. If you do not agree, please leave the website.

More information