Woocommerce using Varnish, Hitch SSL, Cloudflare, Letsencrypt, NGINX with sockets

Looks like that was the magic code, thanks a lot

---

 

Im so sorry fro many questions But I hope my questions will be of benefit to those who want to try this out

on Eva steps;

I got this error

Code:

[12:03][root@centos-7-1 etc]# bash ~/cert-letsencrypt.sh
[Wed Jul  8 12:04:27 UTC 2020] Unknown parameter : --renew-hook=/usr/bin/hitch-deploy-hook

would appreciate ur help

 

looks like this hook deparacted

here is a google search

Clarify and expand renewal-hook documentation · Issue #5935 · certbot/certbot

 

certbot -q renew --renew-hook "service nginx reload"

 

deploy-hook also is unknown parameter

 

Im using your steps

Code:

/root/.acme.sh/acme.sh --issue --dns dns_cf -d 1111.com -d '*.11111.com' -k 2048 --useragent centminmod-centos7-acmesh-dns --renew-hook="/usr/bin/hitch-deploy-hook" --post-hook="service reload hitch"

this is the sh

 

will try this command

hope it will work

How to issue a Let's Encrypt Wildcard SSL certificate with Acme.sh - VirtuBox

Code:

acme.sh --issue -d yourdomain.tld -d *.yourdomain.tld --dns dns_cf -k ec-384

 

looks like he omitted the hook altogether

 

I will go back to Artix method it was having an installation error (cloudflare version was not updated), but now installation is fine

so much work 0

 

good news almost done

but the Cloudflare needs to be updated so as not to use the master account credential which is not safe

I tried to update it but it was messy and asked for an updated OpenSSL so I give up

also u need to add that is ok to have errors after bash command as the important is tp get

-
Congratulations! Your certificate and chain have been saved at:
/etc/letsencrypt/live/example.com/fullchain.pem
Your key file has been saved at:
/etc/letsencrypt/live/example.com/privkey.pem

 

moving forward

I guess it is better to use

include /usr/local/nginx/conf/cloudflare.conf;

Code:

## NGINX CONFIGS ##
Nginx configuration for our hitch ssl, varnish setup
Add this to line 59 of /usr/local/nginx/conf/nginx.conf
Code:
real_ip_header X-Forwarded-For;
set_real_ip_from unix:;
real_ip_recursive on;

 

also u need to correct this

"missing the conf dir"

rename /usr/local/nginx/conf/conf.d/site.com.ssl.conf to /usr/local/nginx/conf/conf.d/site.com.ssl.conf-disabled

This is because nginx will only be serving http requests because that is all varnish understands. Hitch does ALL the SSL work.

 

Hooray it is up and running now, thanks a lot to Atrix and Eva

 

also u need to delet the crontab part for the chasing plugin u chosen during the centmin 22 option install

 

also nano /etc/varnish/default.vcl and change logged in user cookie according to the plugin in wordpress

 

do wee need this step?

 

I have a question if I need to install another domain using varnish, what shall I will

use another files:

nano ~/cert-letsencrypt-domain2.sh
nano /etc/hitch/hitch-domain2.conf

or there is another thing I'm missing?

 

also u are missing this code

Code:

systemctl enable --now hitch varnish nginx

 

still the above codes did not solve the error after reboot, I have to run bash ~/restartservices.sh

also what about if PHP crashes shall theses services reboot by its own to prevent downtime?