Fixing ssl certs on videos.fsci.in
So a couple of days ago we got a message on the matrix channel of videos.fsci.in that the certs had expired and hence people had to access it via http which of-course doesn't look good for the community. The certs were set to autorenew but for some reason they didnt
So I decided to fix the certs today and document the process live for some reason.
I have no idea how this machine was configured since I wasn't around back then and we have no documentation whatsoever so it is also my first time digging into this.
I am hoping to fix the certs issue and then write some docs for people after me
The first thing I see is that there is neither apache nor nginx installed onto the main machine so which might mean that the setup is dockerised
Hence
docker ps
I found out that a bunch of containers were running and one of them was traefik which is probably serving the entire thing.
so now lets try and get into the trafeik container somehow to see how these certs were working
docker exec -it f1895ec8ab20 /bin/bash
docker exec -it f1895ec8ab20 /bin/sh
Both these returned an error saying no such command which means there is no shell in these containers.
My next instinct was to do a simple docker inspect on the trafeik container to get it to reveal it's secrets
looking at the docker inspect output of traefik I see this
"com.docker.compose.config-hash": "",
"com.docker.compose.container-number":
"com.docker.compose.oneoff": ,
"com.docker.compose.project":
"com.docker.compose.service":
"com.docker.compose.version":
which means that it was setup using docker-compose and the Bind section tells me that the volume mounts are somewhere in /root/peertube
sudo ls -l /root/peertube
total 80
-rw-r--r-- 1 root root 70600 Jun 9 2020 docker-compose.log
-rw-r--r-- 1 root root 2404 Jun 9 2020 docker-compose.yml
drwxr-xr-x 8 root root 4096 Jan 7 14:26 docker-volume
which means that it was setup using docker-compose itself , nice
so as every IT guy ever , lets try restarting all the containers using compose
docker-compose restart
Boom, the certs got renewed .
Thanks for sticking around for this very short adventure of mine.