diff options
| author | Yann Jorelle <yannjorelle@proton.me> | 2022-08-07 10:54:29 +0300 |
|---|---|---|
| committer | Yann Jorelle <yannjorelle@proton.me> | 2022-08-07 10:54:29 +0300 |
| commit | aa02cf80aba35fe4e1c1d5abdb662926336c1142 (patch) | |
| tree | 3dd602ccf232e90273aa433c61f0822da3afb5d6 /content/ejabberd.md | |
| parent | 79b235098201f4cffe43d2e55505f6cb32c29b72 (diff) | |
Ejabberd: small improvements/fixes
Adds `-p` option to mkdir when creating the certificate directories. Without
this, the given command fails because `/etc/ejabberd/certs` doesn't exist.
Also adds a command to give the ejabberd user permissions to read the
certificate directories.
Diffstat (limited to 'content/ejabberd.md')
| -rw-r--r-- | content/ejabberd.md | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/content/ejabberd.md b/content/ejabberd.md index 0a7f3a8..0080dba 100644 --- a/content/ejabberd.md +++ b/content/ejabberd.md @@ -70,7 +70,7 @@ Using certbot, this process can be easily automated with these commands: ```sh $DOMAIN=subdomain.example.org -certbot --nginx -d $DOMAIN certonly; mkdir /etc/ejabberd/certs/$DOMAIN +certbot --nginx -d $DOMAIN certonly; mkdir -p /etc/ejabberd/certs/$DOMAIN cp /etc/letsencrypt/live/$DOMAIN/fullchain.pem /etc/ejabberd/certs/$DOMAIN cp /etc/letsencrypt/live/$DOMAIN/privkey.pem /etc/ejabberd/certs/$DOMAIN ``` @@ -78,6 +78,11 @@ cp /etc/letsencrypt/live/$DOMAIN/privkey.pem /etc/ejabberd/certs/$DOMAIN This should be ran with your XMPP hostname **(example.org)** and repeated for all your desired subdomains. +Make sure all the certificates are readable by the `ejabberd` user: +```sh +chown -R ejabberd:ejabberd /etc/ejabberd/certs +``` + To enable the use of all these certificates in ejabberd, the following configuration is necessary: |