Good evening, I am running a self hosted gitlab “gitlab-ee 17.4” I am trying to see if there is a way I can have the Lets Encrypt Cert renew automatically using CloudFlare DNS as its verification method.
Ideas? Thanks!
1 Like
Yes you can but you have to do the letsencrypt stuff outside of the gitlab configuration. Then in your /etc/letsencrypt/renewal/gitlab.example.com.conf file you need to put a renew hook in the renewparams section like:
renew_hook = systemctl restart gitlab-runsvdir
as for the gitlab configuration, you point the nginx ssl_certificate and ssl_certificate_key entries to the letsencrypt certificate, and ensure letsencrypt['enable'] = false is set in the gitlab config.
1 Like
Thanks for your reply.
1 Like