I have a web server running multiple sites on nginx. They are secured by certificates from Lets Encrypt. For some reason, long ago, I installed the certs for one site using standalone rather than the nginx plugin.

So when certbot renew runs, it always fails when that domain is due for renewal because nginx is running on port 80. I have to stop nginx, and re-run certbot, and then restart nginx.

When I run certbot renew --nginx it complains that HTTP validation fails for those domains. I'm having difficulty figuring out how I can tell certbot to revalidate the domains by HTTP and switch them to the nginx plugin.

  • I would not do that at all. See here. – Michael Hampton May 16 at 3:30
  • My main concern is not having to stop nginx so standalone can bind to :80. So I’m open to ideas. – samh May 16 at 11:39
  • Then click the link. – Michael Hampton May 16 at 18:11
  • I would remove the existing certificate and install a new one. – Jens Bradler May 17 at 9:30

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.