FeministWiki:Server setup: Difference between revisions
Technician (talk | contribs) |
Technician (talk | contribs) |
||
| Line 183: | Line 183: | ||
Copy over the certs from the old server: | Copy over the certs from the old server: | ||
# Run on old server | |||
rsync -avz /etc/fw-certs feministwiki.dev:/etc/fw-certs | |||
The {{C|/etc/fw-certs}} directory and its contents should be owned by the group {{C|ssl-cert}}. Make sure this is the case on the new server after running the command above, since the group ID might be different on the new server. If the group doesn't exist at all, just create it. | The {{C|/etc/fw-certs}} directory and its contents should be owned by the group {{C|ssl-cert}}. Make sure this is the case on the new server after running the command above, since the group ID might be different on the new server. If the group doesn't exist at all, just create it. | ||
| Line 191: | Line 192: | ||
Then, to allow certain services to read those files containing the private key, add them to the {{C|ssl-cert}} group: | Then, to allow certain services to read those files containing the private key, add them to the {{C|ssl-cert}} group: | ||
# Run on new server | |||
adduser ejabberd ssl-cert | adduser ejabberd ssl-cert | ||
adduser irc ssl-cert | adduser irc ssl-cert | ||
Also copy over the certificates stored directly in {{C|/etc/letsencrypt}}: | |||
# Run on old server | |||
rsync -avz /etc/letsencrypt/{archive,live} feministwiki.dev:/etc/letsencrypt | |||
=== Put config files in place === | === Put config files in place === | ||