Hi,
is there a way to increase the limit of 50 ssl per week? We are currently moving a lot of VM and need to reissue the certificates.
there is from for that but it'd take weeks so not sure if it'd useful to you
https://isrg.formstack.com/forms/rate_limit_adjustment_request
As an alternative, certificates can usually be moved from old to new hosts manually or using scripting. It depends on what OS and web server combinations you are using and how familiar you are with your https config for each site.
The 50 certs limit is per domain, is so it sounds like your sites are all subdomains of a primary domain?
Ahhh thats the best solution, moving them Thank you!! Using ubuntu and certbot
Yeah those all are subdomains from one domain
For server migration you may find other recent threads but the things to look out for with certbot include copying the configuration and recreating symbolic links (live to archive) and permissions, plus ensuring that paths are all updated in any relevant config. Best to try it with a few sites, check they work, then check that renewals also renew properly, then migrate the rest of your sites using the same process.
from chatgpt:
Copy certificate and key:
Copy the certificate files and private key from your Debian server to the Ubuntu server. This could look like this:
sh
scp /etc/letsencrypt/live/your-domain/* user@ubuntu-server:/etc/letsencrypt/live/your-domain/
Copy configuration files:
Copy the configuration files for Certbot if they exist:
scp -r /etc/letsencrypt/renewal/ user@ubuntu-server:/etc/letsencrypt/renewal/
scp -r /etc/letsencrypt/archive/ user@ubuntu-server:/etc/letsencrypt/archive/
Set permissions:
Make sure the permissions are set correctly:
sudo chown -R root:root /etc/letsencrypt
sudo chmod -R 755 /etc/letsencrypt
Install Certbot on the Ubuntu server:
Install Certbot on the Ubuntu server if you haven't already done so:
sudo apt update
sudo apt install certbot
Test renewal:
Test the renewal of the certificates to make sure everything works:
sudo certbot renew --dry-run
Set up automatic renewal:
Certbot usually automatically sets up a cron job or systemd timer to renew the certificates. Check this:
sudo systemctl list-timers
This may work, will try
Yeah I'm not sure how cerbot will behave for renewal if the files in /live are actual files instead of symlinks to the latest archive file but see how you get on.
Don't give too much weight to what chatgtp tells you. Good luck!
yeah indeed its only a hint from chatgpt, its not working
rsync
when used with -a
(for "archive") will preserve symlinks and permissions/ownership as far as I know. And I think it's also possible to use rsync
over SSH, right?
Anyway, ChatGPT is not a great source. Even the hint to use apt
is very outdated, as using snap
is currently the recommended method of installing Certbot.
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.