| commit | ab0d5f830d83fbbae43c41039364b3fc5d06acc3 | [log] [tgz] |
|---|---|---|
| author | Paulo Köch <paulo.koch@gmail.com> | Wed Apr 05 11:05:01 2017 +0100 |
| committer | GitHub <noreply@github.com> | Wed Apr 05 11:05:01 2017 +0100 |
| tree | 4e988cde762ed56dfca47ddc27ff845770074c3c | |
| parent | d2a81b1f163ad8b6d554a5c38d1899b6a1912a09 [diff] |
Update README.md
It's expected that the root hosted zone for the domain in question already exists in your account.
Create a virtual environment
Update its pip and setuptools (VENV/bin/pip install -U setuptools pip) to avoid problems with cryptography's dependency on setuptools>=11.3.
Make sure you have libssl-dev and libffi (or your regional equivalents) installed. You might have to set compiler flags to pick things up (I have to use CPPFLAGS=-I/usr/local/opt/openssl/include LDFLAGS=-L/usr/local/opt/openssl/lib on my macOS to pick up brew's openssl, for example).
Install this package.
Make sure you have access to AWS's Route53 service, either through IAM roles or via .aws/credentials. Check out sample-aws-policy.json for the necessary permissions.
To generate a certificate:
certbot certonly \ -n --agree-tos --email DEVOPS@COMPANY.COM \ -a certbot-route53:auth \ -d MY.DOMAIN.NAME