Sonarr + Let's Encrypt

[anon70424920]

Hello there,
Someone already tried to setup https with Lets Emcrypt on Debian?

https://letsencrypt.readthedocs.org/en/latest/intro.html#about-the-let-s-encrypt-client

[subzero79]

I can give it a go later maybe with nginx and and a reverse proxy. Went the other day to LE but they were still closed. I think they said they were going to open the 3rd

[subzero79]

I did not pursue further in the ciphers, i used and old transmission setup for ssl, that i’ve found somewhere around in the web.

[anon70424920]

Because they talk about Apache but what web server is used by Sonarr?
Will it worked?

[markus101]

Sonarr uses the Owin stack, but the problem isn’t that web server its mono, it doesn’t support recent ciphers so Chrome and Firefox will have issues with it.

[subzero79]

I am using nginx with proxy pass (reverse proxy).
Later I’ll see about the ciphers, the nginx version of wheezy is pretty old.
I had to use a LE command I’ve found somewhere else, the manual or standalone commands described in the LE docs did not worked at first.

[subzero79]

This is the LE cli i used, the nginx daemon needs to be down before running it.

./letsencrypt-auto certonly --standalone --agree-tos --redirect --duplicate --text --email user@mail.com -d domain.com -d sonarr.domain.com --server https://acme-v01.api.letsencrypt.org/directory

The output will go to /etc/letsencrypt/live/domain.com/

This is the server block i used

server {
    server_name domain.com;
    listen 443;
    ssl                  on;
    ssl_certificate      /etc/letsencrypt/live/domain.com/fullchain.pem;
    ssl_certificate_key  /etc/letsencrypt/live/domain.com/privkey.pem;
    ssl_session_timeout  5m;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH:!aNULL:!MD5:!DSS;
    ssl_prefer_server_ciphers on;
    ssl_dhparam /etc/ssl/certs/dhparam.pem;
    location / {
        proxy_pass http://localhost:8989;
        proxy_buffering off;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
    }
}

That configuration gave me an overall of A in ssllabs.com