ADVERTISEMENT

Automate SSL Renewals in Dockerized Nginx with Certbot & Cron

Ever found out your website has an expired SSL certificate at the worst time possible? You’re not alone! Let’s walk through a super-easy way to automate SSL renewals in a Dockerized Nginx setup using Certbot and Cron.

Why Automate SSL Renewals?

SSL certificates are like a seal of trust on your website. They’re needed to keep data safe between the user’s browser and your server. But they don’t last forever! So, automating renewals saves you from the hassle of constant manual checks.

Setting Up Dockerized Nginx with Certbot

First, you’ll want to have Docker and Docker Compose installed on your server. Once you have them ready, it’s time to compose your Docker setup. This will usually consist of docker-compose.yml where you’ll define Nginx, Certbot, and maybe other services.

version: '3'
services:
  nginx:
    image: nginx:stable
    volumes:
      - ./data/certbot/conf:/etc/letsencrypt
      - ./data/nginx:/etc/nginx/conf.d
    ports:
      - "80:80"
      - "443:443"
  certbot:
    image: certbot/certbot
    volumes:
      - ./data/certbot/conf:/etc/letsencrypt
      - ./data/certbot/www:/var/www/certbot

Running Certbot for the First Time

With your Docker services set up, you’re ready to run Certbot. Use the following command to obtain certificates for your domain:

docker-compose run --rm certbot certonly --webroot --webroot-path=/var/www/certbot -d yourdomain.com

This command will create certificates in the directory mapped to /etc/letsencrypt in your Docker container.

Automating Renewals with Cron Jobs

The magic happens when you automate this process. We use Cron Jobs to renew certificates automatically. Here’s how:

0 0,12 * * * docker-compose run --rm certbot renew --quiet --deploy-hook "docker-compose exec -T nginx nginx -s reload"

This job runs twice daily, ensuring your SSL certificates are always up to date. It quietly attempts to renew them and reloads the Nginx server if successful.

More Resources?

If you’re diving deep into automation, you might also find setting up n8n on a budget-friendly DigitalOcean VPS interesting! It’s another great way to enhance your tech setup.

Conclusion

Fixing expired SSL certificates shouldn’t be a dreaded task. With a Dockerized Nginx setup, Certbot, and Cron, you can ensure your certificates renew like clockwork. It’s like setting up a self-winding watch—once it’s set, you’ve got one less worry!