> ## Documentation Index
> Fetch the complete documentation index at: https://docs-v2.ard.co/llms.txt
> Use this file to discover all available pages before exploring further.

# Load Balancer Certificate Deployment

> Deploy SSL certificates to Hetzner and Digital Ocean load balancers

Load balancers require certificate updates for multiple services across Hetzner and Digital Ocean platforms.

<Note>
  Complete the [SSL Certificate Renewal](/infrastructure/ssl-renewal) process before deploying certificates to load balancers.
</Note>

## Hetzner Load Balancers

Hetzner load balancers require certificate updates for multiple services across different projects.

### Load Balancers

<Tabs>
  <Tab title="satellite-images-lb">
    **Project ID:** 772593

    **Load Balancer ID:** 235603

    **Console URL:** [https://console.hetzner.com/projects/772593/loadbalancers/235603/services](https://console.hetzner.com/projects/772593/loadbalancers/235603/services)

    **Service:** Satellite images load balancer
  </Tab>

  <Tab title="mapi-lb">
    **Project ID:** 851833

    **Load Balancer ID:** 288998

    **Console URL:** [https://console.hetzner.com/projects/851833/loadbalancers/288998/services](https://console.hetzner.com/projects/851833/loadbalancers/288998/services)

    **Service:** Mobile API load balancer
  </Tab>

  <Tab title="mapi-lb2">
    **Project ID:** 851833

    **Load Balancer ID:** 584500

    **Console URL:** [https://console.hetzner.com/projects/851833/loadbalancers/584500/services](https://console.hetzner.com/projects/851833/loadbalancers/584500/services)

    **Service:** Mobile API load balancer 2
  </Tab>
</Tabs>

### Hetzner Upload Process

<Steps>
  <Step title="Access Hetzner Console">
    Log in to the Hetzner Cloud Console and navigate to the appropriate project.
  </Step>

  <Step title="Select Load Balancer">
    Click on the load balancer from the list or use the direct console URL.
  </Step>

  <Step title="Navigate to Services">
    Go to the **Services** tab for the load balancer.
  </Step>

  <Step title="Edit Service">
    Click **Edit** on the service that requires certificate update.
  </Step>

  <Step title="Update Certificate">
    In the SSL/TLS settings:

    * Paste the certificate (including full chain)
    * Paste the private key
    * Save the changes
  </Step>

  <Step title="Verify">
    Check that the service is using the new certificate and test connectivity.
  </Step>
</Steps>

<Note>
  Hetzner load balancers support automatic certificate renewal through Let's Encrypt. However, manual upload may be required for certain configurations or when using custom certificates.
</Note>

## Digital Ocean

Digital Ocean requires certificate updates for the login service load balancer and account-level certificate management.

### Load Balancer Information

**Service:** login.devops.arabiaweather.com

**Load Balancer ID:** `9f612d1e-889d-47dc-a4ff-eb51600ca3ee`

**Load Balancer Settings:** [https://cloud.digitalocean.com/networking/load\_balancers/9f612d1e-889d-47dc-a4ff-eb51600ca3ee/settings?i=cdb227](https://cloud.digitalocean.com/networking/load_balancers/9f612d1e-889d-47dc-a4ff-eb51600ca3ee/settings?i=cdb227)

### Digital Ocean Upload Process

<Steps>
  <Step title="Access Digital Ocean Console">
    Log in to the Digital Ocean Cloud Console.
  </Step>

  <Step title="Navigate to Load Balancer">
    Go to **Networking** → **Load Balancers** and select the load balancer, or use the direct URL.
  </Step>

  <Step title="Update Load Balancer Certificate">
    1. Click on the **Settings** tab
    2. Scroll to **SSL/TLS Certificates** section
    3. Click **Edit** on the existing certificate or **Add Certificate**
    4. Upload or paste:
       * **Certificate:** Full certificate chain
       * **Private Key:** Private key file
    5. Save the changes
  </Step>

  <Step title="Upload to Account Security">
    Additionally, upload the certificate to Digital Ocean account security settings:

    1. Navigate to: [https://cloud.digitalocean.com/account/security?i=cdb227](https://cloud.digitalocean.com/account/security?i=cdb227)
    2. Go to **SSL Certificates** section
    3. Click **Add Certificate**
    4. Upload the certificate and private key
    5. Save
  </Step>

  <Step title="Verify">
    Test the `login.devops.arabiaweather.com` endpoint to ensure the certificate is active.
  </Step>
</Steps>

<Warning>
  Digital Ocean requires certificates to be uploaded in both the load balancer settings and account security settings. Ensure both locations are updated.
</Warning>

## Verification Checklist

After deploying certificates to all load balancers:

### Hetzner Load Balancers

* [ ] satellite-images-lb certificate updated (Project: 772593, LB: 235603)
* [ ] mapi-lb certificate updated (Project: 851833, LB: 288998)
* [ ] mapi-lb2 certificate updated (Project: 851833, LB: 584500)
* [ ] Services responding with new certificate

### Digital Ocean

* [ ] Load balancer certificate updated (LB: 9f612d1e-889d-47dc-a4ff-eb51600ca3ee)
* [ ] Account security certificate uploaded
* [ ] login.devops.arabiaweather.com accessible with new certificate