I'm currently trying to share and use my wildcard certificate from letsencrypt with NFS, but the servers who are supposed to use it, cannot do so.
To my Setup: I have 3 VM's (in future maybe 4) running. One is a Reverse-proxy, that receives all http and https traffic and redirects them to my Mail server and my Kanboard. My mailserver runs with iRedMail.
My problem is that I fail to deploy the certificate on both, the Kanboard and the iRedMail server. Kanboard (APACHE2) tells me this:
SSLCertificateFile: file '/mnt/letsencrypt/live/domain.com/fullchain.pem' does not exist or is empty
and iRedMail (NGINX) this:
nginx: [emerg] BIO_new_file("/etc/ssl/certs/iRedMail.crt") failed (SSL: error:0200100D:system library:fopen:Permission denied:fopen('/etc/ssl/certs/iRedMail.crt'
HTTPS access for domain.com (meaning Reverse-Proxy) works without a problem.
Output for sudo ls -l /etc/letsencrypt/ (live)
drwxrwxrwx 3 administrator root 4096 Feb 13 16:25 live
All 3 Servers run Ubuntu 1804 Server and the user "administrator" uses the same credentials.
If you need anymore information, feel free to ask. Edits