Skip to main content
SSL certificates are managed through an automated renewal process and deployed across multiple platforms to ensure secure connections for all services.

SSL Certificate Renewal

Complete guide for renewing SSL certificates using Let’s Encrypt and deploying Traefik Docker images.View SSL Renewal Process →

Certificate Deployment

Step-by-step instructions for deploying certificates to Bunny CDN, Hetzner load balancers, Digital Ocean, AWS3 nodes, Stations server, and Forum server.View Deployment Guide →

​
Certificate Management Process

SSL certificates are managed through an automated renewal process that:
1

Certificate Generation

Certificates are generated using Let’s Encrypt for multiple domains through the renew.sh script.
2

Docker Image Build

The renewal process generates a Traefik Docker image containing the updated certificates.
3

Service Deployment

The Docker image is deployed to Docker Swarm cluster services for Traefik.
4

Multi-Platform Sync

Certificates are synchronized across multiple platforms including CDN services, load balancers, Docker services, and standalone servers.
Certificate renewal typically follows a quarterly schedule. Always verify certificate expiration dates before renewal.

​
Managed Domains

The following domains are managed through the SSL renewal process:
  • api.mobile.devops.arabiaweather.com
  • media.devops.arabiaweather.com
  • meteoweather.global
  • forum.arabiaweather.com
  • safi-app.com
  • ard.co
  • internal.ard.co
  • devops.arabiaweather.com
  • arabiaweather.com

​
Deployment Platforms

Certificates are deployed to multiple platforms:
  • Bunny CDN - Multiple CDN hostnames across different zones
  • Load Balancers - Hetzner and Digital Ocean load balancers
  • AWS3 Nodes - MinIO services via Docker images
  • Servers - Stations and Forum servers via SCP and nginx reload
For detailed deployment instructions, see the Certificate Deployment Guide.