WebサーバをHTTPS化する|Apache|ConoHa VPS

sudo apt update #パッケージリストの更新
sudo apt install software-properties-common #リポジトリ追加の準備
sudo add-apt-repository universe #「universe」リポジトリの追加
sudo apt update #「universe」リポジトリを含むパッケージリストの更新
sudo apt install certbot python3-certbot-apache # ApacheのWebサーバーに設定するためのツール

sudo certbot --apache

Deploying certificate
Successfully deployed certificate for sana-dev1.com to /etc/apache2/sites-available/000-default-le-ssl.conf
Error while running apache2ctl configtest.
Action 'configtest' failed.
The Apache error log may have more information.

AH00526: Syntax error on line 31 of /etc/apache2/sites-enabled/000-default.conf:
Name duplicates previous WSGI daemon definition.

We were unable to install your certificate, however, we successfully restored your server to its prior configuration.

NEXT STEPS:
- The certificate was saved, but could not be installed (installer: apache). After fixing the error shown below, try installing it again by running:
  certbot install --cert-name sana-dev1.com

Error while running apache2ctl configtest.
Action 'configtest' failed.
The Apache error log may have more information.

AH00526: Syntax error on line 31 of /etc/apache2/sites-enabled/000-default.conf:
Name duplicates previous WSGI daemon definition.

1ServerName sana-dev1.com
2WSGIDaemonProcess api_project python-path=/var/www/app python-home=/var/www/app/venv
3#↑失敗した原因。コメントアウトすることで解消する。
4WSGIScriptAlias / /var/www/app/app.wsgi
5
6<Directory /var/www/app>
7    WSGIProcessGroup api_project
8    WSGIApplicationGroup %{GLOBAL}
9    Require all granted
10</Directory>

$ sudo certbot renew --dry-run
[sudo] password for hogehoge: 
Saving debug log to /var/log/letsencrypt/letsencrypt.log
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Processing /etc/letsencrypt/renewal/hogehoge.com.conf
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Account registered.
Simulating renewal of an existing certificate for hogehoge.com
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Congratulations, all simulated renewals succeeded: 
  /etc/letsencrypt/live/hogehoge.com/fullchain.pem (success)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

$ systemctl list-timers | grep certbot
Mon 2024-03-04 05:43:35 JST 12h left    Sun 2024-03-03 13:57:28 JST 3h 7min ago  certbot.timer                  certbot.service

echo "0 2 * * * root certbot renew" | sudo tee -a /etc/cron.d/certbot

sudo systemctl enable backup.timer
sudo systemctl start backup.timer

sudo ufw allow 443/tcp #443番ポートを許可
sudo ufw status #追加されたことの確認
To                         Action      From
--                         ------      ----
443/tcp                    ALLOW       Anywhere    
443/tcp (v6)               ALLOW       Anywhere (v6)  

ServerName hogehoge.com
# WSGIDaemonProcess api_project python-path=/var/www/app python-home=/var/www/app/venv
#↑80番ポートは使わないのでコメントアウトしてある。
WSGIScriptAlias / /var/www/app/app.wsgi

<Directory /var/www/app>
    WSGIProcessGroup api_project
    WSGIApplicationGroup %{GLOBAL}
    Require all granted
</Directory>

RewriteEngine on #追加されてる！
RewriteCond %{SERVER_NAME} =hogehoge.com #追加されてる！
RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent] #追加されてる！