Update domain references from merchbay.app to merchbay.com in configuration files
Some checks failed
Deploy Development / deploy (push) Failing after 5s

This commit is contained in:
Frank John Begornia
2025-12-12 01:34:05 +08:00
parent 0cedc90031
commit c72e03f282
4 changed files with 31 additions and 35 deletions

View File

@@ -51,19 +51,17 @@ You should have these files from your SSL provider:
Create a combined certificate file:
```bash
# Create SSL directory in Traefik
mkdir -p /opt/traefik/certs
# Copy your certificate and key
sudo cp merchbay.app.crt /opt/traefik/certs/
sudo cp merchbay.app.key /opt/traefik/certs/
# Your SSL certificates are in /srv/certs
# Verify files exist
ls -la /srv/certs/
# If you have a CA bundle, create a full chain
cat merchbay.app.crt ca-bundle.crt > /opt/traefik/certs/merchbay.app-fullchain.crt
cd /srv/certs
cat merchbay.app.crt ca-bundle.crt > merchbay.app-fullchain.crt
# Set proper permissions
sudo chmod 600 /opt/traefik/certs/*.key
sudo chmod 644 /opt/traefik/certs/*.crt
sudo chmod 600 /srv/certs/*.key
sudo chmod 644 /srv/certs/*.crt
```
### Step 2: Configure Traefik File Provider
@@ -77,18 +75,18 @@ sudo nano /opt/traefik/dynamic/certs.yml
Add:
```yaml
# /opt/traefik/dynamic/certs.yml
# /opt/traefik/dynamic/certs.yml or your Traefik dynamic config location
tls:
certificates:
- certFile: /certs/merchbay.app-fullchain.crt
keyFile: /certs/merchbay.app.key
- certFile: /srv/certs/merchbay.app-fullchain.crt
keyFile: /srv/certs/merchbay.app.key
stores:
- default
stores:
default:
defaultCertificate:
certFile: /certs/merchbay.app-fullchain.crt
keyFile: /certs/merchbay.app.key
certFile: /srv/certs/merchbay.app-fullchain.crt
keyFile: /srv/certs/merchbay.app.key
```
### Step 3: Update Traefik docker-compose.yml
@@ -112,7 +110,7 @@ services:
- "--certificatesresolvers.letsencrypt.acme.httpchallenge.entrypoint=web"
volumes:
- /var/run/docker.sock:/var/run/docker.sock:ro
- /opt/traefik/certs:/certs:ro
- /srv/certs:/srv/certs:ro
- /opt/traefik/dynamic:/etc/traefik/dynamic:ro
- traefik-letsencrypt:/letsencrypt
networks:
@@ -221,7 +219,7 @@ echo | openssl s_client -servername merchbay.app -connect merchbay.app:443 2>/de
1. Visit https://dev.merchbay.app
- Certificate should be issued by "Let's Encrypt Authority X3"
2. Visit https://merchbay.app
2. Visit https://merchbay.com
- Certificate should be issued by your paid SSL provider
## Troubleshooting
@@ -245,24 +243,24 @@ dig dev.merchbay.app +short
```bash
# Verify Traefik can read certificates
docker exec traefik ls -l /certs/
docker exec traefik ls -l /srv/certs/
# Check dynamic configuration is loaded
docker exec traefik cat /etc/traefik/dynamic/certs.yml
# Verify certificate format
openssl x509 -in /opt/traefik/certs/merchbay.app-fullchain.crt -text -noout
openssl x509 -in /srv/certs/merchbay.app-fullchain.crt -text -noout
# Check private key
openssl rsa -in /opt/traefik/certs/merchbay.app.key -check
openssl rsa -in /srv/certs/merchbay.app.key -check
```
### Certificate Mismatch
```bash
# Verify certificate and key match
openssl x509 -noout -modulus -in /opt/traefik/certs/merchbay.app.crt | openssl md5
openssl rsa -noout -modulus -in /opt/traefik/certs/merchbay.app.key | openssl md5
openssl x509 -noout -modulus -in /srv/certs/merchbay.app.crt | openssl md5
openssl rsa -noout -modulus -in /srv/certs/merchbay.app.key | openssl md5
# Both should output the same hash
```
@@ -277,7 +275,7 @@ Automatic renewal every 60 days. No action needed.
Before certificate expiration:
1. Download new certificate from your SSL provider
2. Update files in `/opt/traefik/certs/`
2. Update files in `/srv/certs/`
3. Restart Traefik: `docker compose restart traefik`
4. Verify: `curl -vI https://merchbay.app`