PHP-FPM Optimization

Unfortunately, focus is on CentOS 7 and 8 (in development for now). Performance is very nice - posted a Centmin Mod Wordpress cache guide and benchmarks at https://servermanager.guide/203/wordpress-cache-enabler-advanced-full-page-caching-guide/ :slight_smile:

2 Likes

Hey I’m trying centmin mod.

  1. I’ve created the vhost with https support.
  2. Then I did acme.sh --issue -d example.com -d \*.example.com --dns dns_cf --force and certs are created in /root/.acme.sh/example.com/
  3. I moved the files to /usr/local/nginx/conf/ssl/example.com/

I have two questions:
A. I see a cronjob for acme.sh. Is it enough to auto renew my certs?
B. Do I have to move the files everytime after renewal?

I don’t frequent this forum enough so if you have Centmin Mod questions, might want to ask at https://community.centminmod.com/ :slight_smile:

If you want to use Cloudflare DNS API for Letsencrypt DNS validation, Centmin Mod 123.09beta01 can do this natively now via CF_DNSAPI_GLOBAL variable without needing manual acme.sh commands and moving certs see example at https://blog.centminmod.com/2020/09/06/203/wordpress-cache-enabler-advanced-full-page-caching-guide/

specific section at https://blog.centminmod.com/2020/09/06/203/wordpress-cache-enabler-advanced-full-page-caching-guide/#4

for CF_DNSAPI_GLOBAL variable see https://community.centminmod.com/threads/update-addons-acmetool-sh-with-full-cloudflare-dns-api-in-123-09beta01.20327/

acme.sh cronjob is enough to handle validation and renewal if done via centmin supported methods i.e. centmin.sh menu option 2, 22 or nv command line or via addons/acmetool.sh wrapper for acme.sh https://centminmod.com/acmetool/ as all these methods handle the installing of letsencrypt SSL certs in respective SSL file locations like /usr/local/nginx/conf/ssl/example.com/ and acme.sh cron will know to do the same on renewal

if you do it manually like you have, acme.sh won’t know on renewal to move to /usr/local/nginx/conf/ssl/example.com/ location the SSL files

If you insist on using acme.sh command directly additional arguments are needed to be passed and examples below for

1 Like