Table of Contents

1. TOC

---

Renewing certificate for jellyfin nginx proxy

Goal is to allow certbot to renew the cert automatically.

Issues

• certbot can’t renew since directory for validation is redirecting to https and can’t access the required directory to complete the challenge

What i’ve tried so far.

• Checked namecheap for redirections
• commented out nginx 301 redirect to https
• changed domain from https to http
• changed domain from http to https
• removed mail service domain in namecheap advanced dns settings

Namecheap config

Old

Source URL: free-shit.pro Dest URL: https://free-shit.pro

• Removed redirect domain : free-shit.pro -> https://free-shit.pro

• changed jellyfin published server URI’s from https to http

  New

Source URL: free-shit.pro

Dest URL: http://free-shit.pro

Note changed it back

Nginx config

• commented out the location / section , systemctl reload nginx

Current nginx config ( with 301 commented out )

server {
        listen 80;
        server_name www.free-shit.pro;

    location /.well-known/acme-challenge/ {
        root /var/www/certbot;
        allow all;
    }

    #location /{

        #return 301 https://$host$request_uri;
        #}

}

server {

        listen 443 ssl http2;

        server_name www.free-shit.pro;

    ssl_certificate /etc/letsencrypt/live/free-shit.pro/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/free-shit.pro/privkey.pem; 

        client_max_body_size 20M;

        ssl_protocols TLSv1.3 TLSv1.2;


    location / {

        proxy_pass http://127.0.0.1:8096;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }



}