Install SSL Certificate
***********************

.. important:: These instructions related to manually obtained SSL certificates.
               To use lets encrypt certificates see :doc:`ssl-letsencrypt`

To create a certificate, see :doc:`ssl`...

Configuration
=============

The following task expects the certificate to be in a folder for the domain
within a folder called ``ssl-cert`` which is placed beside the ``pillar``
folder.  See :doc:`site-config` for details...

Make sure the Salt pillar is configured correctly for the site.  You need to
set ``ssl`` to ``True`` and the ``domain`` must match the certificate e.g::

  domain: hatherleigh.info
  ssl: True

.. important:: If you are using :doc:`mailgun`, then don't forget to update
  the route to use ``https`` rather than ``http``.

Usage
=====

To copy an SSL certificate to a cloud server run this from the fabric folder::

  fab domain:www.hatherleight.info ssl

.. note:: These tasks will ask you to enter the ``sudo`` password for the user on
  the server.

.. note:: This task expects the ``/srv/`` folder to exist on the server.  I
  don't know what creates the folder... so I am currently not sure how it gets
  there!

To update an existing certificate::

  ssh hatherleigh_info
  sudo -i
  service nginx restart

To add a new first certificate run::

  salt 'drop-temp' state.apply --state-verbose=False

for your server so the site is set-up correctly for SSL.