SSL Support

Jump to bottom

Dave Townsend edited this page Oct 27, 2025 · 1 revision

You need to install lego and generate an initial certificate and then put the lego configuration in /etc/default/lego.

Create a service to renew the certificate:

/lib/systemd/system/lego.service

[Unit]
Description=Lego certificate renewals

[Service]
Type=oneshot
EnvironmentFile=-/etc/default/lego
ExecStart=/usr/bin/lego --path /etc/lego --email="$LEGO_EMAIL" --dns $LEGO_PROVIDER --domains $LEGO_DOMAINS renew

And a timer to trigger it periodically:

/lib/systemd/system/lego.timer

[Unit]
Description=Renew certificates

[Timer]
Persistent=true
OnCalendar=*-*-* 1:26
RandomizedDelaySec=1h

[Install]
WantedBy=timers.target

And add the certificate to the service configuration:

/etc/default/flick-sync

FLICK_SYNC_STORE=/mnt/media/flicksync
FLICK_SYNC_CERTIFICATE="/etc/lego/certificates/<domain>.crt"
FLICK_SYNC_PRIVATE_KEY="/etc/lego/certificates/<domain>.key"
FLICK_SYNC_DISABLE_SYNCING=1