> ## Documentation Index
> Fetch the complete documentation index at: https://docs-v2.ard.co/llms.txt
> Use this file to discover all available pages before exploring further.

# Certificate Deployment

> Deploy SSL certificates across multiple platforms including CDN services, load balancers, Docker services, and servers

After renewing SSL certificates and deploying the Traefik Docker image, you need to synchronize certificates across multiple platforms including CDN services, load balancers, Docker services, and standalone servers.

<Note>
  Complete the [SSL Certificate Renewal](/infrastructure/ssl-renewal) process before proceeding with platform-specific deployments.
</Note>

## Deployment Platforms

Certificates need to be deployed to the following platforms:

<CardGroup>
  <Card title="Bunny CDN" icon="cloud">
    Deploy certificates to 6 CDN hostnames across different zones.

    [View Bunny CDN Guide →](/infrastructure/certificate-deployment/bunny-cdn)
  </Card>

  <Card title="Load Balancers" icon="server">
    Update certificates on Hetzner and Digital Ocean load balancers.

    [View Load Balancers Guide →](/infrastructure/certificate-deployment/load-balancers)
  </Card>

  <Card title="AWS3 Nodes" icon="cube">
    Build and deploy Docker images with updated certificates for MinIO services.

    [View AWS3 Nodes Guide →](/infrastructure/certificate-deployment/aws3-nodes)
  </Card>

  <Card title="Servers" icon="computer-desktop">
    Deploy certificates to Stations and Forum servers via SCP and nginx reload.

    [View Servers Guide →](/infrastructure/certificate-deployment/servers)
  </Card>
</CardGroup>

## Certificate File Locations

After running the renewal script, certificate files are typically located in:

<CardGroup>
  <Card title="Certificate File">
    Full certificate chain (`.crt` or `.pem`)

    Usually contains the domain certificate and intermediate certificates
  </Card>

  <Card title="Private Key">
    Private key file (`.key` or `.pem`)

    Keep this file secure and never share publicly
  </Card>

  <Card title="Full Chain">
    Complete certificate chain

    Includes: Domain certificate + Intermediate certificates + Root certificate (optional)
  </Card>
</CardGroup>

## Verification Checklist

After deploying certificates to all platforms, verify each deployment:

<Steps>
  <Step title="Bunny CDN">
    * [ ] All 6 hostnames have updated certificates
    * [ ] SSL validation passes for each hostname
    * [ ] No certificate warnings in browser
  </Step>

  <Step title="Load Balancers">
    * [ ] Hetzner load balancers updated (satellite-images-lb, mapi-lb, mapi-lb2)
    * [ ] Digital Ocean load balancer updated
    * [ ] Account security certificate uploaded (Digital Ocean)
    * [ ] Services responding with new certificate
  </Step>

  <Step title="AWS3 Nodes (MinIO)">
    * [ ] Docker image built with new certificates
    * [ ] Image pushed to registry
    * [ ] Docker stack deployed successfully
    * [ ] minio\_nginx service running with new image
    * [ ] minio\_server service running
  </Step>

  <Step title="Servers">
    * [ ] Stations server certificates copied and nginx reloaded
    * [ ] Forum server certificates copied and nginx reloaded
    * [ ] All domains accessible with new certificates
  </Step>
</Steps>