Quick Links
SSL Certificate Renewal
Complete guide for renewing SSL certificates using Let’s Encrypt and deploying Traefik Docker images.View SSL Renewal Process →
Certificate Deployment
Step-by-step instructions for deploying certificates to Bunny CDN, Hetzner load balancers, Digital Ocean, AWS3 nodes, Stations server, and Forum server.View Deployment Guide →
Certificate Management Process
SSL certificates are managed through an automated renewal process that:1
Certificate Generation
Certificates are generated using Let’s Encrypt for multiple domains through the
renew.sh script.2
Docker Image Build
The renewal process generates a Traefik Docker image containing the updated certificates.
3
Service Deployment
The Docker image is deployed to Docker Swarm cluster services for Traefik.
4
Multi-Platform Sync
Certificates are synchronized across multiple platforms including CDN services, load balancers, Docker services, and standalone servers.
Certificate renewal typically follows a quarterly schedule. Always verify certificate expiration dates before renewal.
Managed Domains
The following domains are managed through the SSL renewal process:- api.mobile.devops.arabiaweather.com
- media.devops.arabiaweather.com
- meteoweather.global
- forum.arabiaweather.com
- safi-app.com
- ard.co
- internal.ard.co
- devops.arabiaweather.com
- arabiaweather.com
Deployment Platforms
Certificates are deployed to multiple platforms:- Bunny CDN - Multiple CDN hostnames across different zones
- Load Balancers - Hetzner and Digital Ocean load balancers
- AWS3 Nodes - MinIO services via Docker images
- Servers - Stations and Forum servers via SCP and nginx reload