1 (edited by montanelli 2021-09-03 02:28:22)

Topic: Suggestion perhaps

Regarding the documentation for letsencypt.

Either it's wrong or I have a comprehension issue. lol

From:

https://docs.iredmail.org/letsencrypt.h … e-ssl-cert

In section: Request a free cert from Let's Encrypt
Right before section:  Renew the cert automatically

"Directory /etc/letsencrypt/live/ and /etc/letsencrypt/archive are owned by root user and group, with permission 0700 (set by certbot program) by default, it means other users can not access them -- including the daemon users used to run network services like Postfix/Dovecot/OpenLDAP/MariaDB/PostgreSQL. It's necessary to set the permission to 0644 for other applications to access them.

chmod 0755 /etc/letsencrypt/{live,archive}"

Is it to be targeted as 0755 or 0644?

And maybe be recursive? chmod -R 0755 /etc/letsencrypt/{live,archive}

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: Suggestion perhaps

Use 0755, without '-R'.
Doc has been updated. Thanks for the feedback. smile