I can't using cerbot and apache make my instance https

[youshitsune]

I tried optimizing my CSP and TLS grade, but I broke something. And then reinstalled whole searxng last time I made it https, but now I can't.

[tiekoetter]

@youshitsune Your certificate only includes the domain youshitsune.me

[youshitsune]

But how could I make certificate for searx.youshitsune.me using Let's Encrypt

[tiekoetter]

@youshitsune How did you get your current certificate?

[youshitsune]

Using certbot and Let's encrypt

[tiekoetter]

@youshitsune What command did you use? I need a bit more information to help you.

[youshitsune]

I use certbot --apache command.

[youshitsune]

I examined my VirtualHosts and they are configured.

[youshitsune]

Here is my searxng.conf:

# -*- coding: utf-8; mode: apache -*-

LoadModule headers_module       /usr/lib/apache2/modules/mod_headers.so
LoadModule proxy_module         /usr/lib/apache2/modules/mod_proxy.so
LoadModule proxy_uwsgi_module   /usr/lib/apache2/modules/mod_proxy_uwsgi.so
# LoadModule setenvif_module /usr/lib/apache2/modules/mod_setenvif.so

# SetEnvIf Request_URI / dontlog
# CustomLog /dev/null combined env=dontlog

<Location />

    <IfModule mod_security2.c>
        SecRuleEngine Off
    </IfModule>

    Require all granted

    Order deny,allow
    Deny from all
    # Allow from fd00::/8 192.168.0.0/16 fe80::/10 127.0.0.0/8 ::1
    Allow from all

    ProxyPreserveHost On
    ProxyPass unix:/run/uwsgi/app/searxng/socket|uwsgi://uwsgi-uds-searx/

</Location>

[tiekoetter]

Do you have any other way to contact you? I don't think we will get far in this github discussion.

[youshitsune]

I have my email youshitsune@protomail.com and discord

[tiekoetter]

Discord would probably work best if you don't mind.

craftsmany#6174