Skip to main content
After renewing SSL certificates and deploying the Traefik Docker image, you need to synchronize certificates across multiple platforms including CDN services, load balancers, Docker services, and standalone servers.
Complete the SSL Certificate Renewal process before proceeding with platform-specific deployments.

Deployment Platforms

Certificates need to be deployed to the following platforms:

Bunny CDN

Deploy certificates to 6 CDN hostnames across different zones.View Bunny CDN Guide →

Load Balancers

Update certificates on Hetzner and Digital Ocean load balancers.View Load Balancers Guide →

AWS3 Nodes

Build and deploy Docker images with updated certificates for MinIO services.View AWS3 Nodes Guide →

Servers

Deploy certificates to Stations and Forum servers via SCP and nginx reload.View Servers Guide →

Certificate File Locations

After running the renewal script, certificate files are typically located in:

Certificate File

Full certificate chain (.crt or .pem)Usually contains the domain certificate and intermediate certificates

Private Key

Private key file (.key or .pem)Keep this file secure and never share publicly

Full Chain

Complete certificate chainIncludes: Domain certificate + Intermediate certificates + Root certificate (optional)

Verification Checklist

After deploying certificates to all platforms, verify each deployment:
1

Bunny CDN

  • All 6 hostnames have updated certificates
  • SSL validation passes for each hostname
  • No certificate warnings in browser
2

Load Balancers

  • Hetzner load balancers updated (satellite-images-lb, mapi-lb, mapi-lb2)
  • Digital Ocean load balancer updated
  • Account security certificate uploaded (Digital Ocean)
  • Services responding with new certificate
3

AWS3 Nodes (MinIO)

  • Docker image built with new certificates
  • Image pushed to registry
  • Docker stack deployed successfully
  • minio_nginx service running with new image
  • minio_server service running
4

Servers

  • Stations server certificates copied and nginx reloaded
  • Forum server certificates copied and nginx reloaded
  • All domains accessible with new certificates