From aa02cf80aba35fe4e1c1d5abdb662926336c1142 Mon Sep 17 00:00:00 2001 From: Yann Jorelle Date: Sun, 7 Aug 2022 10:54:29 +0300 Subject: Ejabberd: small improvements/fixes Adds `-p` option to mkdir when creating the certificate directories. Without this, the given command fails because `/etc/ejabberd/certs` doesn't exist. Also adds a command to give the ejabberd user permissions to read the certificate directories. --- content/ejabberd.md | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/content/ejabberd.md b/content/ejabberd.md index 0a7f3a8..0080dba 100644 --- a/content/ejabberd.md +++ b/content/ejabberd.md @@ -70,7 +70,7 @@ Using certbot, this process can be easily automated with these commands: ```sh $DOMAIN=subdomain.example.org -certbot --nginx -d $DOMAIN certonly; mkdir /etc/ejabberd/certs/$DOMAIN +certbot --nginx -d $DOMAIN certonly; mkdir -p /etc/ejabberd/certs/$DOMAIN cp /etc/letsencrypt/live/$DOMAIN/fullchain.pem /etc/ejabberd/certs/$DOMAIN cp /etc/letsencrypt/live/$DOMAIN/privkey.pem /etc/ejabberd/certs/$DOMAIN ``` @@ -78,6 +78,11 @@ cp /etc/letsencrypt/live/$DOMAIN/privkey.pem /etc/ejabberd/certs/$DOMAIN This should be ran with your XMPP hostname **(example.org)** and repeated for all your desired subdomains. +Make sure all the certificates are readable by the `ejabberd` user: +```sh +chown -R ejabberd:ejabberd /etc/ejabberd/certs +``` + To enable the use of all these certificates in ejabberd, the following configuration is necessary: -- cgit v1.2.3