How can I use Lets Encrypt & Certbot with Ubooquity on Windows 10

Note for instructions above:

If your web server (Ubooquity) runs on a non-standard port (not port 80), you will likely have setup a port forward on your home network's firewall to forward incoming-from-the-internet port 80 to port 80 on the PC you're running certbot on. It uses port 80 to confirm your domain ownership and to grab the certs. It uses this for renewing the certs as well, so you will need to leave this port mapping in place in your firewall.

Give WinAcme a try. It is mainly for IIS Servers, but there is an option for a manual cert creation that you can copy and place into another server's cert location.

CAVEAT!  You either need to have port 80 accessible to your machine RUNNING WinAcme FROM the internet, or have access to the DNS server's TXT records to paste the Text authentication string that LetsEnrypt is looking for in order to very ownership and control of the domain you are trying to secure.  In all honesty it IS a VERY easy process if you take the time to read the menu options, the requirements WinAcme is looking for and have an understanding of your network, domain and servers.  If you are an "End User" and ANYTHING I said is above your head" then you need to step back, do some research and become familiar with what it is you are doing, the components and what you are putting out on to the network/internet. Not know these things CAN put you at risk for breaches, infection and trouble.

Still interested?

I cant see why you want a SSL cert unless you plan to access it from outside and from a domain?

Or do you want just a local SSL cert?

(depending on your answer there is different solutions)

Absolutely! I'm still interested. I'm sure others are too. The main reason to have SSL is for accessing it from outside and your cert has to match your domain name or the browser will throw errors. A local or self-signed cert will still throw browser errors which most users won't understand. So if you've got friends/family that access your collection over the Internet, a good cert from a verifiable source is important.

Sorry for the long delay in replying. I missed your reply and just discovered it. Anyway, my Ubooquity is hosted on my main home PC running Win10. It is on 24/7. It's a physical box, not a virtual.

Hi Tom,

Ye, doesn't help that the notification mail ends up in the spam folder, ;)

Well, there are quite a few ways of doing it, so here are two:

1) 

Install nginx from here: https://nginx.org/en/download.html 

    You already have the certs so something similar to this in the nginx config: 

   server {
        listen       443 ssl;
        server_name  yourdomain;
        ssl_certificate      D:/nginx-1.15.6/ssl/xxxxx-chain.pem;  
        ssl_certificate_key  D:/nginx-1.15.6/ssl/xxxxxx-key.pem;  
        charset utf-8;

        location / {
          proxy_pass http://192.168.x.x:2202;
          proxy_set_header X-Forwarded-For $remote_addr;
          proxy_set_header X-Forwarded-Proto $scheme;
          proxy_set_header Host $host;
        }
    }

    Change the paths for the ssl to yours, example from here: https://dev.to/nalani/nginx-configures-free-ssl-certificate-in-windows-environment-let-s-encrypt-36b6 

    And set your IP in the proxy_pass.

2)

    Set up a no-ip or other DDNS.
    Install docker (with WSL support: https://docs.docker.com/desktop/install/windows-install/ )
    Search for SWAG in the searchbar:
    

    Press run on "linuxserver/swag" and edit accordingly

    All config will reside in the shoosen "Volumes" folder.
    Edit "D:\SWAG\nginx\site-confs\default.conf" as needed, only need to edit the proxy_pass from above.
    ( Pick a better path than D:\SWAG, just an example, ;)  )        

    After each update to any config, restart SWAG "container"

    This will update your SSL certs automatically and add some protection like fail2ban

    More info here: https://hub.docker.com/r/linuxserver/swag

I haven't tried the docker way on my windows machine but it should work, it should be the equalent of how i run it on my linux machine.