Skip to content

Instantly share code, notes, and snippets.

@RienNeVaPlus

RienNeVaPlus/letsencrypt-certbot-arangodb.md

Last active February 28, 2024 12:31
Show Gist options
  • Save RienNeVaPlus/b351f49adef9ebf5928f09299dbe26f1 to your computer and use it in GitHub Desktop.
Save RienNeVaPlus/b351f49adef9ebf5928f09299dbe26f1 to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. RienNeVaPlus revised this gist Apr 19, 2020. 1 changed file with 4 additions and 2 deletions.
    6 changes: 4 additions & 2 deletions letsencrypt-certbot-arangodb.md
    View file
    Original file line number Diff line number Diff line change
    @@ -3,7 +3,7 @@
    *Let's Encrypt generates SSL certificates for free.*
    Follow these steps to create and use an SSL certificate with ArangoDB.

    ### 1. Install the Certbot from LetsEncrypt ([certbot instructions](https://certbot.eff.org/lets-encrypt/ubuntubionic-other))
    ### 1. Install the Certbot from LetsEncrypt ([Certbot instructions](https://certbot.eff.org/lets-encrypt/ubuntubionic-other))

    ```bash
    sudo apt-get update
    @@ -37,7 +37,7 @@ Make sure the ArangoDB user (usually `arangodb`) can read the `server.pem` and `
    chown -R arangodb:arangodb ./etc/letsencrypt/* # depending on your system
    ```

    ### 5. Configure ArangoDB to use the Certificate
    ### 5. Configure ArangoDB to use the certificate

    ```bash
    vi /etc/arangodb3/arangod.conf
    @@ -64,6 +64,8 @@ service arangodb3 restart
    service arangodb3 status # make sure it's running
    ```

    ---

    Related / sources:
    - [Certbot instructions](https://certbot.eff.org/lets-encrypt/ubuntubionic-other)
    - StackOverflow: [ArangoDB working together with letsenrcypt certificates](https://stackoverflow.com/questions/52964021/arangodb-working-together-with-letsenrcypt-certificates)
  2. RienNeVaPlus revised this gist Apr 19, 2020. 1 changed file with 1 addition and 1 deletion.
    2 changes: 1 addition & 1 deletion letsencrypt-certbot-arangodb.md
    View file
    Original file line number Diff line number Diff line change
    @@ -1,7 +1,7 @@
    ## Using Let's Encrypt's Certbot Certificates with ArangoDB

    *Let's Encrypt generates SSL certificates for free.*
    Follow these steps to create and use an SSL certificate and with ArangoDB.
    Follow these steps to create and use an SSL certificate with ArangoDB.

    ### 1. Install the Certbot from LetsEncrypt ([certbot instructions](https://certbot.eff.org/lets-encrypt/ubuntubionic-other))

  3. RienNeVaPlus revised this gist Apr 19, 2020. 1 changed file with 6 additions and 1 deletion.
    7 changes: 6 additions & 1 deletion letsencrypt-certbot-arangodb.md
    View file
    Original file line number Diff line number Diff line change
    @@ -62,4 +62,9 @@ C. Save & close
    ```
    service arangodb3 restart
    service arangodb3 status # make sure it's running
    ```
    ```

    Related / sources:
    - [Certbot instructions](https://certbot.eff.org/lets-encrypt/ubuntubionic-other)
    - StackOverflow: [ArangoDB working together with letsenrcypt certificates](https://stackoverflow.com/questions/52964021/arangodb-working-together-with-letsenrcypt-certificates)
    - StackOverflow: [Arangod.conf for SSL](https://stackoverflow.com/questions/40315135/arangod-conf-for-ssl)
  4. RienNeVaPlus created this gist Apr 19, 2020.
    65 changes: 65 additions & 0 deletions letsencrypt-certbot-arangodb.md
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,65 @@
    ## Using Let's Encrypt's Certbot Certificates with ArangoDB

    *Let's Encrypt generates SSL certificates for free.*
    Follow these steps to create and use an SSL certificate and with ArangoDB.

    ### 1. Install the Certbot from LetsEncrypt ([certbot instructions](https://certbot.eff.org/lets-encrypt/ubuntubionic-other))

    ```bash
    sudo apt-get update
    sudo apt-get install software-properties-common
    sudo add-apt-repository universe
    sudo add-apt-repository ppa:certbot/certbot
    sudo apt-get update

    sudo apt-get install certbot
    ```

    ### 2. Generate the certificate
    Run certbot and answer the prompted questions.

    ```bash
    sudo certbot certonly
    ```

    ### 3. Create the certificate/key bundle required by ArangoDB
    ArangoDB requires a single file containing the certificate chain as well as the private key.

    ```bash
    cd /etc/letsencrypt/live/example.com # replace example.com with your domain
    cat fullchain.pem privkey.pem > server.pem
    ```

    ### 4. Grant access to user `arangodb`
    Make sure the ArangoDB user (usually `arangodb`) can read the `server.pem` and `fullchain.pem` files.

    ```bash
    chown -R arangodb:arangodb ./etc/letsencrypt/* # depending on your system
    ```

    ### 5. Configure ArangoDB to use the Certificate

    ```bash
    vi /etc/arangodb3/arangod.conf
    ```

    A. Add the endpoint to the `[server]` block
    ```
    [server]
    endpoint = ssl://example.com:8529
    ```

    B. Create the `[ssl]` block before any other block
    ```
    [ssl]
    cafile = /etc/letsencrypt/live/example.com/fullchain.pem
    keyfile = /etc/letsencrypt/live/example.com/server.pem
    ```

    C. Save & close

    ### 6. Restart the server
    ```
    service arangodb3 restart
    service arangodb3 status # make sure it's running
    ```