jekyll-gitlab-letsencrypt

This plugin automagically does 90% of the letsencrypt process for your gitlab-hosted jekyll blog.

(automatic) It registers your email to the letsencrypt server
(automatic) It generates a challenge file, and commits it directly via the gitlab API
(automatic) It sleeps until the challenge file is live on the internet
(automatic) It asks letsencrypt to verify it
(automatic) It spits out the certificate chain and private key
(manual) You have to go to the URL provided and manually copy/paste them
- This step must be manual since there is no API through Gitlab for this step

Usage

Prerequisites

You must have:

A jekyll blog
- Hosted on gitlab pages
- With a domain name set up and working
Gitlab CI setup such that when you push to master (or your preferred branch), your changes are deployed live

Versions supported:

Jekyll 3+
Ruby 2.1+

Installation

Add to your Gemfile:

  group :jekyll_plugins do
    gem 'jekyll-emojis'
    gem 'jekyll-more-emojis'
++  gem 'jekyll-gitlab-letsencrypt'
  end

and run bundle install

First-time Configuration

Get a personal access token: https://gitlab.com/profile/personal_access_tokens

Add a gitlab-letsencrypt to your _config.yml:

gitlab-letsencrypt:
  # Gitlab settings:
  personal_access_token: 'MUCH SECRET'             # Gotten from the step above ^^
  gitlab_repo:           'gitlab_user/gitlab_repo' # Namespaced repository identifier

  # Domain settings:
  email:                 '[email protected]'     # Let's Encrypt email address
  domain:                'example.com'             # Domain that the cert will be issued for

  # Jekyll settings:
  base_path:  './'               # Where you want the file to go
  pretty_url: false              # Add a "/" on the end of the URL... set to `true` if you use permalink_style: pretty
  filename:   'letsencrypt.html' # What to call the generated challenge file

  # Delay settings:
  initial_delay: 120 # How long to wait for Gitlab CI to push your changes before it starts checking
  delay_time:     15 # How long to wait between each check once it starts looking for the file

  # Optional settings you probably don't need:
  endpoint:  'https://somewhere' # if you're doing the ACME thing outside of letsencrypt
  branch:    'master'            # Defaults to master, but you can use a different branch
  layout:    'null'              # Layout to use for challenge file - defaults to null, but you can change if needed

Running

Just type jekyll letsencrypt

$ jekyll letsencrypt
Registering [email protected] to https://acme-v01.api.letsencrypt.org/...
Pushing file to Gitlab
Commiting challenge file as lets.html
Done Commiting! Check https://gitlab.com/gitlab_user/gitlab_repo/commits/master
Going to check http://example.com/.well-known/acme-challenge/lots_of_numbers/ for the challenge to be present...
Waiting 120 seconds before we start checking for challenge..
Got response code 404, waiting 15 seconds...
Got response code 404, waiting 15 seconds...
Got response code 200, file is present!
Requesting verification...
Challenge status = valid
Challenge is valid!
Certificate retrieved!
Go to https://gitlab.com/gitlab_user/gitlab_repo/pages
 - If you already have an existing entry for example.com, remove it
 - Then click + New Domain and enter the following:

Domain: example.com

Certificate (PEM):
-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----

  Key (PEM):
-----BEGIN RSA PRIVATE KEY-----
...
-----END RSA PRIVATE KEY-----




... hit save, wait a bit, and your new SSL will be live!

License

MIT

Credits/thanks

:heart: Gitlab for free page hosting, free repos, and free CI!
:heart: the Jekyll team for the easy-to-use blogging engine!
Inspired by the excellent gitlab-letsencrypt npm package.