


This is the last command used on naschenweng’s blog, it works on DSM 5.2: acme.sh -issue -post-hook "kill -USR1 `cat /run/httpd/httpd-sys.pid`" -d -dns dns_cf -certpath /usr/syno/etc/ssl/ssl.crt/server.crt -keypath /usr/syno/etc/ssl/ssl.key/server.key -fullchainpath/usr/syno/etc/ssl/ssl.intercrtĪnd this is the last command taken from Neilpang’s github documentation: acme.sh -issue -d YOURDOMAIN.TLD -dns dns_cf -certpath /usr/syno/etc/certificate/system/default/cert.pem -keypath /usr/syno/etc/certificate/system/default/privkey.pem -fullchainpath /usr/syno/etc/certificate/system/default/fullchain.pem -reloadcmd "/usr/syno/etc/rc.sysv/nginx.How to install Let’s Encrypt SSL Certificate on Synology NAS with DSM 6 Some snippets were borrowed from this blog and from the acme.sh author mentioned below: If you want to automatically renew the certificate, check out my follow-up post. reloadcmd "/usr/syno/etc/rc.sysv/nginx.sh reload" -dnssleep 10Īnd that’s it, now you have a valid Let’s Encrypt SSL certificate on your Synology DSM.

fullchain-file /usr/syno/etc/certificate/system/default/fullchain.pem \ ca-file /usr/syno/etc/certificate/system/default/syno-ca-cert.pem \ key-file /usr/syno/etc/certificate/system/default/privkey.pem \ dns dns_cf -cert-file /usr/syno/etc/certificate/system/default/cert.pem \ acme.sh -issue -d -home /usr/local/share/acme.sh \ Here is the final command that actually works. Let acme.sh update itself: sudo acme.sh -upgrade -auto-upgradeĮdit /usr/local/share/acme.sh/nf with your favorite editor and put this in: ACCOUNT_EMAIL=' 'Įxport CF_Key="M圜loudFlare-Global-API-Key"Įxport CF_Email="M圜loudFlare-Account-Email-Address" acme.sh -install -nocron -home /usr/local/share/acme.sh -accountemail " " Installing acme.sh and getting your SSL certificateįirst, install acme.sh as root (log in SSH using your admin account): curl -L -o /tmp/master.tgz In this blog, I am assuming you have your DNS and Cloudflare already set up.īelow are the steps I took to get Let’s Encrypt! working on my Synology DS1515+.

None of the solutions I found worked for me, because either the commands were outdated or they were referring to a cronjob, that is no longer available. I have encountered a few blogs with different approaches to solve the Let’s Encrypt issue on the latest current DSM release, version 6.1. If you’re like me and have your Synology NAS safely on your local network, without it being accessible from the big bad internet, you’ll likely find this post quite interesting.
