HAProxy SSL


Generation

haproxy(1) uses PEM-formatted certificates for encryption. This is simply the certificate and private key concatenated.

The following script can be used by either a cron job or set as a certbot(1) post-installation hook.

domain="example.com"
dir="/etc/letsencrypt/live/${domain}"

cat "${dir}/fullchain.pem" "${dir}/privkey.pem" > "${dir}/${domain}.pem"


Configuration


CategoryRicottone