docs: instructions for renewing certbot when using nginx (#415)

This commit is contained in:
Hasan Khan
2025-10-01 12:03:33 -04:00
committed by GitHub
parent 281a24cf08
commit 64b55a6b8e

View File

@@ -111,6 +111,35 @@ cd LibreChat
sudo docker-compose -f ./deploy-compose.yml up -d
```
## Renewing certificates when using nginx
If you set up nginx using the recommended Option A above, use these steps to renew the certificates:
1. Navigate to your application's directory
```bash filename="Replace 'LibreChat' with your actual application directory.
cd LibreChat
```
2. Stop your running Docker containers
```bash filename="Stop your application"
sudo docker-compose -f ./deploy-compose.yml down -d
```
3. renew certificates
```bash
sudo certbot renew
```
4. Restart your application
```bash filename="Start your application"
sudo docker-compose -f ./deploy-compose.yml up -d
```
Note: certbot might restart the host's nginx. You can kill it with `sudo pkill nginx`
## Web Application Firewall
Nginx can be configured to act as a web application firewall (WAF) by leveraging the OWASP Core Rule Set (CRS), which provides a robust set of rules to protect against common web application vulnerabilities and attacks. Using OWASP CRS with Nginx can enhance the security of your LibreChat deployment by adding an additional layer of protection.
@@ -147,4 +176,4 @@ DISABLE_COMPRESSION=true
This will prevent LibreChat from compressing static files, allowing NGINX to handle compression more efficiently.
For more information on static file handling in LibreChat, including caching options, refer to the [Static File Handling](/docs/configuration/dotenv#static-file-handling) documentation.
For more information on static file handling in LibreChat, including caching options, refer to the [Static File Handling](/docs/configuration/dotenv#static-file-handling) documentation.