# SSL / Apache Idroservice

Hostname: **vte.idro-service.mypantarei.net**

## Certificato Let's Encrypt

Già emesso (scade 2026-10-19):

```
/var/www/html/server-ops/mypantarei/letsencrypt/config/live/vte.idro-service.mypantarei.net/
```

Rinnovo (cron certbot utente o):

```bash
certbot renew \
  --config-dir /var/www/html/server-ops/mypantarei/letsencrypt/config \
  --work-dir /var/www/html/server-ops/mypantarei/letsencrypt/work \
  --logs-dir /var/www/html/server-ops/mypantarei/letsencrypt/logs
```

## Abilitare vhost (dopo modifica config)

I VirtualHost HTTP/HTTPS sono in:

- `/etc/apache2/sites-available/vtesmau.conf`
- `/etc/apache2/sites-available/vtesmau-le-ssl.conf`

Serve **reload Apache** (una tantum):

```bash
sudo bash /var/www/html/server-ops/mypantarei/reload-idroservice-apache.sh
```

## Verifica

```bash
curl -I https://vte.idro-service.mypantarei.net/
# Subject CN deve essere vte.idro-service.mypantarei.net
echo | openssl s_client -connect vte.idro-service.mypantarei.net:443 -servername vte.idro-service.mypantarei.net 2>/dev/null | openssl x509 -noout -subject
```