==== Install ====

```bash
emerge -av letsencrypt
```

==== Configure lighttpd ====

Based on instructions [here](https://www.mikeshultz.com/systems/2015/12/04/lets-encrypt-beta-with-lighttpd.html)...

``` bash
mkdir -p /tmp/letsencrypt/public_html/.well_known
```

Modify `/etc/lighttpd/lighttpd.conf` to include the following...

```bash
## Used for letsencrypt validation
$HTTP["url"] =~ "^/.well-known/" {
    server.document-root = "/tmp/letsencrypt/public_html/.well-known/"
    alias.url = ( "/.well-known/" => "/tmp/letsencrypt/public_html/.well-known/" )
    dir-listing.activate = "disable"
}
```

Restart your server...

```bash
/etc/init.d/lighttpd restart
```

==== Obtain Certificate ====

Look for your basedir in `/etc/lighttpd/lighttpd.conf`...

```bash
grep base /etc/lighttpd/lighttpd.conf
```

Use your domain name, and the basedir the above returns...

```bash
letsencrypt certonly --webroot -w /var/www/localhost -d kimura.no-ip.info
```

As advised backup the created `/etc/letsencrypt/` directory to somewhere secure.

==== Links ====

  *[[https://letsencrypt.org/getting-started/|Lets Encrypt : Getting Started]]

{{tag>gentoo linux letsencrypt}}