Skip to main content
Stations and Forum servers require manual certificate deployment via SCP and nginx reload.
Complete the SSL Certificate Renewal process before deploying certificates to servers.

​
Stations Server

The Stations server requires manual certificate copy via SCP and nginx reload.

​
Server Information

Domain: https://stations.arabiaweather.com/ Server Console: https://console.hetzner.com/projects/45831/servers/573033/overview Server IP: 195.201.22.130 SSH Key: ~/.ssh/ydabain.pem

​
Deployment Process

1

Locate Certificate Files

Ensure you have the certificate files from the renewal process. The certificates should be in:
~/ardlabs/ssl.latest/latest/certs/letsencrypt/arabiaweather.com/
Files needed:
  • fullchain.crt
  • privkey.pem
2

Copy Certificate Files

Copy the certificate files to the Stations server:
scp -i ~/.ssh/ydabain.pem -o IdentitiesOnly=yes \
  ~/ardlabs/ssl.latest/latest/certs/letsencrypt/arabiaweather.com/fullchain.crt \
  root@195.201.22.130:/home/aw/repos/weatherStations/nginx/nginx/certs/chain.crt

scp -i ~/.ssh/ydabain.pem -o IdentitiesOnly=yes \
  ~/ardlabs/ssl.latest/latest/certs/letsencrypt/arabiaweather.com/privkey.pem \
  root@195.201.22.130:/home/aw/repos/weatherStations/nginx/nginx/certs/private.pem
The certificate files are copied to:
  • fullchain.crt → /home/aw/repos/weatherStations/nginx/nginx/certs/chain.crt
  • privkey.pem → /home/aw/repos/weatherStations/nginx/nginx/certs/private.pem
3

Reload Nginx

SSH to the Stations server:
ssh -i ~/.ssh/ydabain.pem root@195.201.22.130
Switch to the aw user:
su - aw
Reload nginx to apply the new certificates:
docker container exec -it nginx nginx -s reload
4

Verify

Test the domain to ensure the certificate is active:
curl -I https://stations.arabiaweather.com/
Check that the certificate is valid and matches the expected expiration date.

​
Forum Server

The Forum server requires manual certificate copy via SCP and nginx reload.

​
Server Information

Domain: forum.arabiaweather.com Server: root@forum.arabiaweather.com

​
Deployment Process

1

Locate Certificate Files

Ensure you have the certificate files from the renewal process. Files needed:
  • fullchain.crt (or fullchain.pem)
  • privkey.pem
2

Copy Certificate Files

Copy the certificate files to the Forum server:
scp privkey.pem root@forum.arabiaweather.com:/etc/nginx/cert/privkey.pem

scp fullchain.crt root@forum.arabiaweather.com:/etc/nginx/cert/fullchain.pem
The certificate files are copied to:
  • privkey.pem → /etc/nginx/cert/privkey.pem
  • fullchain.crt → /etc/nginx/cert/fullchain.pem
3

Reload Nginx

SSH to the Forum server:
ssh root@forum.arabiaweather.com
Reload nginx to apply the new certificates:
nginx -s reload
4

Verify

Test the domain to ensure the certificate is active:
curl -I https://forum.arabiaweather.com/
Check that the certificate is valid and matches the expected expiration date.

​
Verification Checklist

After deploying certificates to both servers:

​
Stations Server

  • Certificate files copied to server
  • Nginx reloaded successfully
  • stations.arabiaweather.com accessible with new certificate
  • Certificate expiration date verified

​
Forum Server

  • Certificate files copied to server
  • Nginx reloaded successfully
  • forum.arabiaweather.com accessible with new certificate
  • Certificate expiration date verified