mirror of
https://github.com/pikvm/pikvm.git
synced 2026-09-30 14:47:25 +02:00
Ensure credential files are owned by kvmd-certbot (#1036)
The current instructions will lead to the file being owned by root with rw permissions only granted to the owner. However, the kvmd-certbot script around certbot will invoke certbot as the user kvmd-certbot. Therefore the credential files must be owned by kvmd-certbot.
This commit is contained in:
@@ -69,6 +69,7 @@ This example shows that PiKVM may not be accessible from the internet, but you c
|
||||
# kvmd-pstrun -- mkdir -p /var/lib/kvmd/pst/data/certbot/runroot
|
||||
# kvmd-pstrun -- nano /var/lib/kvmd/pst/data/certbot/runroot/.cloudflare.auth
|
||||
# kvmd-pstrun -- chmod 600 /var/lib/kvmd/pst/data/certbot/runroot/.cloudflare.auth
|
||||
# kvmd-pstrun -- chown kvmd-certbot: /var/lib/kvmd/pst/data/certbot/runroot/.cloudflare.auth
|
||||
```
|
||||
|
||||
3. Obtain the certificate:
|
||||
@@ -154,6 +155,7 @@ This example shows that PiKVM may not be accessible from the internet, but you c
|
||||
|
||||
```
|
||||
# kvmd-pstrun -- chmod 600 /var/lib/kvmd/pst/data/certbot/runroot/.route53.auth
|
||||
# kvmd-pstrun -- chown kvmd-certbot: /var/lib/kvmd/pst/data/certbot/runroot/.route53.auth
|
||||
```
|
||||
|
||||
4. Obtain the certificate:
|
||||
|
||||
Reference in New Issue
Block a user