G\u00fcn\u00fcm\u00fczde web sitelerinin g\u00fcvenli\u011fi, kullan\u0131c\u0131 deneyimi ve arama motoru s\u0131ralamalar\u0131 i\u00e7in vazge\u00e7ilmez bir unsurdur. SSL\/TLS sertifikalar\u0131, sunucu ile istemci aras\u0131ndaki ileti\u015fimi \u015fifreleyerek bu g\u00fcvenli\u011fi sa\u011flar. Let’s Encrypt, bu sertifikalar\u0131 \u00fccretsiz, otomatik ve a\u00e7\u0131k bir \u015fekilde sunan, k\u00e2r amac\u0131 g\u00fctmeyen bir sertifika yetkilisidir (CA). Let’s Encrypt sertifikalar\u0131n\u0131 sunucunuza kurman\u0131n en pop\u00fcler ve kullan\u0131m\u0131 kolay yolu ise Certbot arac\u0131d\u0131r.<\/p>\n
Certbot, Let’s Encrypt ile etkile\u015fim kuran ve sertifika alma, kurma ve yenileme s\u00fcre\u00e7lerini otomatikle\u015ftiren bir yaz\u0131l\u0131md\u0131r. \u00c7o\u011fu zaman Certbot, Apache veya Nginx gibi mevcut bir web sunucusuyla entegre \u00e7al\u0131\u015farak sertifika kurulumunu yapar. Ancak, bazen bir web sunucusu kurulu de\u011fildir veya sertifikay\u0131 farkl\u0131 bir hizmet (\u00f6rne\u011fin bir e-posta sunucusu, VPN veya \u00f6zel bir uygulama) i\u00e7in almak istersiniz. \u0130\u015fte bu noktada Certbot’un “Standalone” (Ba\u011f\u0131ms\u0131z) modu devreye girer.<\/p>\n
Certbot Standalone modu, sertifika alma s\u00fcrecinde Certbot’un kendi ge\u00e7ici web sunucusunu (genellikle 80 veya 443 numaral\u0131 port \u00fczerinden) ba\u015flatarak Let’s Encrypt’in “HTTP-01” veya “TLS-ALPN-01” do\u011frulama meydan okumas\u0131n\u0131 tamamlamas\u0131n\u0131 sa\u011flar. Bu sayede, sunucunuzda ba\u015fka bir web sunucusu \u00e7al\u0131\u015fm\u0131yorken veya port 80\/443’\u00fc ge\u00e7ici olarak bo\u015faltabiliyorsan\u0131z, kolayca SSL sertifikas\u0131 alabilirsiniz. Bu rehberde, Debian 10 i\u015fletim sistemi \u00fczerinde Certbot Standalone modunu kullanarak Let’s Encrypt SSL sertifikalar\u0131n\u0131 nas\u0131l alaca\u011f\u0131n\u0131z\u0131 ad\u0131m ad\u0131m inceleyece\u011fiz.<\/p>\n
Certbot kurulumuna ve sertifika alma i\u015flemine ba\u015flamadan \u00f6nce baz\u0131 \u00f6n haz\u0131rl\u0131k ad\u0131mlar\u0131n\u0131 tamamlaman\u0131z gerekmektedir. Bu ad\u0131mlar, sorunsuz bir kurulum s\u00fcreci i\u00e7in kritik \u00f6neme sahiptir.<\/p>\n
example.com<\/code>).<\/li>\n- DNS Y\u00f6nlendirmesi:<\/strong> Alan ad\u0131n\u0131z\u0131n (veya alt alan ad\u0131n\u0131z\u0131n) A kayd\u0131n\u0131n, sertifikay\u0131 kuraca\u011f\u0131n\u0131z sunucunun genel IP adresine do\u011fru \u015fekilde y\u00f6nlendirilmi\u015f olmas\u0131 ve bu y\u00f6nlendirmenin DNS sunucular\u0131nda yay\u0131lm\u0131\u015f olmas\u0131 gerekmektedir. Certbot, alan ad\u0131n\u0131n ger\u00e7ekten sizin kontrol\u00fcn\u00fczde oldu\u011funu do\u011frulamak i\u00e7in bu kayd\u0131 kullanacakt\u0131r.<\/li>\n<\/ul>\n
Paket G\u00fcncelleme<\/h3>\n
Herhangi bir yaz\u0131l\u0131m kurulumuna ba\u015flamadan \u00f6nce sisteminizdeki paket listesini g\u00fcncelleyip mevcut paketleri y\u00fckseltmek iyi bir pratiktir. Bu, olas\u0131 ba\u011f\u0131ml\u0131l\u0131k sorunlar\u0131n\u0131 \u00f6nler ve en son g\u00fcvenlik yamalar\u0131n\u0131 alman\u0131z\u0131 sa\u011flar.<\/p>\n
sudo apt update\nsudo apt upgrade -y<\/code><\/pre>\nBu komutlar, sisteminizdeki paket bilgilerini g\u00fcncelleyecek ve mevcut t\u00fcm kurulu paketleri en yeni s\u00fcr\u00fcmlerine y\u00fckseltecektir.<\/p>\n
Certbot Kurulumu<\/h2>\n
Certbot’u Debian 10’a kurman\u0131n birka\u00e7 yolu vard\u0131r. En g\u00fcncel ve \u00f6nerilen y\u00f6ntem Snap paket y\u00f6neticisini kullanmakt\u0131r. Alternatif olarak, APT paket y\u00f6neticisi ile de kurulum yapabilirsiniz ancak bu y\u00f6ntem genellikle daha eski Certbot s\u00fcr\u00fcmlerini getirir.<\/p>\n
Snap ile Kurulum (\u00d6nerilen Y\u00f6ntem)<\/h3>\n
Snap, uygulamalar\u0131 ba\u011f\u0131ms\u0131z ve g\u00fcncel tutan bir evrensel paketleme sistemidir. Certbot ekibi de Snap \u00fczerinden en g\u00fcncel s\u00fcr\u00fcmleri sa\u011flamay\u0131 \u00f6nermektedir.<\/p>\n
\n- \n
Snapd Kurulumu:<\/strong> E\u011fer sunucunuzda Snapd kurulu de\u011filse, \u00f6ncelikle onu kurman\u0131z gerekir:<\/p>\nsudo apt install snapd -y<\/code><\/pre>\n<\/li>\n- \n
Snapd Yolu Ekleme (Gerekliyse):<\/strong> Snapd kurulduktan sonra, sisteminizin PATH de\u011fi\u015fkeninde Snapd’nin bin dizininin oldu\u011fundan emin olun. Genellikle bu otomatik olarak yap\u0131l\u0131r, ancak bazen manuel m\u00fcdahale gerekebilir. A\u015fa\u011f\u0131daki komut, PATH’i g\u00fcncelleyerek Snap \u00e7ekirdek dosyalar\u0131n\u0131n do\u011fru \u015fekilde y\u00fcklendi\u011finden emin olur:<\/p>\nsudo snap install core; sudo snap refresh core<\/code><\/pre>\n<\/li>\n- \n
Eski Certbot S\u00fcr\u00fcmlerini Kald\u0131rma (Varsa):<\/strong> Daha \u00f6nce APT ile Certbot kurduysan\u0131z, \u00e7ak\u0131\u015fmalar\u0131 \u00f6nlemek i\u00e7in onu kald\u0131rman\u0131z \u00f6nerilir:<\/p>\nsudo apt remove certbot -y<\/code><\/pre>\n<\/li>\n- \n
Certbot’u Snap ile Kurma:<\/strong> \u015eimdi Certbot’u Snap \u00fczerinden kurabilirsiniz:<\/p>\nsudo snap install --classic certbot<\/code><\/pre>\n<\/li>\n- \n
Certbot Komutunu PATH’e Ba\u011flama:<\/strong> Certbot komutunun sistem genelinde \u00e7al\u0131\u015fabilmesi i\u00e7in bir sembolik ba\u011flant\u0131 olu\u015fturman\u0131z gerekebilir:<\/p>\nsudo ln -s \/snap\/bin\/certbot \/usr\/bin\/certbot<\/code><\/pre>\nBu, certbot<\/code> komutunu do\u011frudan kullanman\u0131z\u0131 sa\u011flar.<\/p>\n<\/li>\n<\/ol>\nAlternatif: APT ile Kurulum (Eski Y\u00f6ntem)<\/h3>\n
E\u011fer Snap kullanmak istemiyorsan\u0131z veya sisteminizde zaten mevcutsa, Certbot’u APT paket y\u00f6neticisi ile de kurabilirsiniz. Ancak bu y\u00f6ntemle genellikle Certbot’un daha eski bir s\u00fcr\u00fcm\u00fcn\u00fc al\u0131rs\u0131n\u0131z ve bu da baz\u0131 yeni \u00f6zelliklerden mahrum kalman\u0131za neden olabilir.<\/p>\n
sudo apt install certbot -y<\/code><\/pre>\nBu komut Certbot’u kuracakt\u0131r. Kurulum sonras\u0131 Certbot’un \u00e7al\u0131\u015f\u0131p \u00e7al\u0131\u015fmad\u0131\u011f\u0131n\u0131 certbot --version<\/code> komutu ile kontrol edebilirsiniz.<\/p>\nCertbot Standalone Modu ile SSL Sertifikas\u0131 Alma<\/h2>\n
Certbot Standalone modu, sunucunuzda ba\u015fka bir web sunucusu \u00e7al\u0131\u015fm\u0131yorken veya ge\u00e7ici olarak durdurulabiliyorsa sertifika almak i\u00e7in idealdir. Bu modda Certbot, do\u011frulama s\u0131ras\u0131nda kendi k\u00fc\u00e7\u00fck web sunucusunu ba\u015flat\u0131r.<\/p>\n
Standalone Modunun \u00c7al\u0131\u015fma Prensibi<\/h3>\n
Let’s Encrypt, bir alan ad\u0131n\u0131n kontrol\u00fcn\u00fczde oldu\u011funu do\u011frulamak i\u00e7in \u00e7e\u015fitli “meydan okuma” y\u00f6ntemleri kullan\u0131r. Standalone modu, “HTTP-01” meydan okumas\u0131n\u0131 kullan\u0131r. Bu meydan okumada:<\/p>\n
\n- Certbot, Let’s Encrypt’ten \u00f6zel bir token al\u0131r.<\/li>\n
- Certbot, sunucunuzda ge\u00e7ici olarak 80 numaral\u0131 portta (veya
--tls-alpn<\/code> kullan\u0131rsan\u0131z 443 numaral\u0131 portta) k\u00fc\u00e7\u00fck bir web sunucusu ba\u015flat\u0131r.<\/li>\n- Bu sunucu, Let’s Encrypt’ten gelen token ile birlikte belirli bir URL’de (\u00f6rne\u011fin,
http:\/\/example.com\/.well-known\/acme-challenge\/<\/code>) bir do\u011frulama dosyas\u0131 yay\u0131nlar.<\/li>\n- Let’s Encrypt sunucular\u0131, alan ad\u0131n\u0131z \u00fczerinden bu URL’ye eri\u015ferek do\u011frulama dosyas\u0131n\u0131 kontrol eder. E\u011fer dosya do\u011fruysa, alan ad\u0131n\u0131n kontrol\u00fcn\u00fczde oldu\u011funu onaylar ve sertifikay\u0131 verir.<\/li>\n<\/ol>\n
\u00d6nemli Not:<\/strong> Sertifika alma i\u015flemi s\u0131ras\u0131nda sunucunuzun 80 numaral\u0131 portunun (veya 443’\u00fcn) bo\u015f olmas\u0131 gerekmektedir. E\u011fer Apache, Nginx gibi bir web sunucusu bu portu kullan\u0131yorsa, sertifika alma i\u015flemi s\u0131ras\u0131nda o servisi ge\u00e7ici olarak durdurman\u0131z gerekecektir. Aksi takdirde Certbot kendi sunucusunu ba\u015flatamaz ve hata verir.<\/p>\nSertifika Talep Etme<\/h3>\n
Tek bir alan ad\u0131 i\u00e7in sertifika talep etmek olduk\u00e7a basittir:<\/p>\n
sudo certbot certonly --standalone -d example.com<\/code><\/pre>\nBu komutu \u00e7al\u0131\u015ft\u0131rd\u0131\u011f\u0131n\u0131zda Certbot sizden baz\u0131 bilgiler isteyecektir:<\/p>\n
\n- E-posta Adresi:<\/strong> Sertifika s\u00fcresi dolmadan \u00f6nce uyar\u0131lar almak ve \u00f6nemli bildirimler i\u00e7in bir e-posta adresi girin.<\/li>\n
- Hizmet \u015eartlar\u0131n\u0131 Kabul Etme:<\/strong> Let’s Encrypt’in hizmet \u015fartlar\u0131n\u0131 kabul etmeniz gerekecektir.<\/li>\n
- E-posta Payla\u015f\u0131m\u0131:<\/strong> EFF (Electronic Frontier Foundation) ile e-posta adresinizi payla\u015fmak isteyip istemedi\u011finiz sorulacakt\u0131r.<\/li>\n<\/ul>\n
T\u00fcm bu ad\u0131mlar\u0131 tamamlad\u0131ktan sonra, Certbot sertifika alma i\u015flemini ger\u00e7ekle\u015ftirecek ve ba\u015far\u0131l\u0131 olursa sertifikalar\u0131n\u0131z\u0131n nerede sakland\u0131\u011f\u0131n\u0131 size bildirecektir.<\/p>\n
Birden Fazla Domain \u0130\u00e7in Sertifika Talep Etme<\/h3>\n
Ayn\u0131 sertifika alt\u0131nda birden fazla alan ad\u0131 (\u00f6rne\u011fin, hem example.com<\/code> hem de www.example.com<\/code>) i\u00e7in sertifika almak istiyorsan\u0131z, -d<\/code> parametresini birden fazla kez kullanabilirsiniz:<\/p>\nsudo certbot certonly --standalone -d example.com -d www.example.com -d sub.example.com<\/code><\/pre>\nBu, t\u00fcm belirtilen alan adlar\u0131 i\u00e7in tek bir SAN (Subject Alternative Name) sertifikas\u0131 olu\u015fturacakt\u0131r.<\/p>\n
Sertifika Dosyalar\u0131n\u0131n Konumu<\/h3>\n
Certbot, sertifikalar\u0131 genellikle a\u015fa\u011f\u0131daki dizin yap\u0131s\u0131nda saklar:<\/p>\n
\/etc\/letsencrypt\/live\/example.com\/<\/code><\/pre>\nBu dizin i\u00e7inde a\u015fa\u011f\u0131daki \u00f6nemli dosyalar\u0131 bulacaks\u0131n\u0131z:<\/p>\n
\nprivkey.pem<\/code>: \u00d6zel anahtar\u0131n\u0131z. Bu dosya gizli kalmal\u0131d\u0131r.<\/li>\ncert.pem<\/code>: Alan ad\u0131n\u0131za ait sunucu sertifikas\u0131.<\/li>\nchain.pem<\/code>: Ara sertifikalar (Let’s Encrypt CA zinciri).<\/li>\nfullchain.pem<\/code>: cert.pem<\/code> ve chain.pem<\/code> dosyalar\u0131n\u0131n birle\u015fimi. \u00c7o\u011fu web sunucusu veya uygulama bu dosyay\u0131 kullan\u0131r.<\/li>\n<\/ul>\nBu dosyalar\u0131, kullanmak istedi\u011finiz hizmetin (\u00f6rne\u011fin Nginx, Apache, Postfix, Dovecot vb.) yap\u0131land\u0131rma dosyalar\u0131nda belirtmeniz gerekecektir.<\/p>\n
Sertifikalar\u0131n Otomatik Yenilenmesi<\/h2>\n
Let’s Encrypt sertifikalar\u0131 90 g\u00fcn ge\u00e7erlidir. Bu k\u0131sa s\u00fcre, g\u00fcvenlik risklerini minimize etmek ve otomasyonu te\u015fvik etmek i\u00e7in bilerek belirlenmi\u015ftir. Sertifikalar\u0131n\u0131z\u0131n s\u00fcresi dolmadan yenilenmesi kritik \u00f6neme sahiptir.<\/p>\n
Yenileme S\u00fcreci<\/h3>\n
Certbot, sertifikalar\u0131 otomatik olarak yenilemek i\u00e7in bir renew<\/code> komutuna sahiptir. Bu komut, sadece s\u00fcresi dolmaya yak\u0131n olan (genellikle 30 g\u00fcn i\u00e7inde) sertifikalar\u0131 yeniler. Yenileme i\u015flemi s\u0131ras\u0131nda Certbot, ilk sertifika al\u0131m\u0131nda kullan\u0131lan do\u011frulama y\u00f6ntemini (bu durumda Standalone modu) tekrar kullanmaya \u00e7al\u0131\u015f\u0131r.<\/p>\nNeyse ki, Certbot’u Snap ile kurdu\u011funuzda, sistem otomatik olarak bir systemd<\/code> zamanlay\u0131c\u0131 birimi veya cron<\/code> i\u015fi olu\u015fturur. Bu, certbot renew<\/code> komutunun d\u00fczenli olarak (genellikle g\u00fcnde iki kez) \u00e7al\u0131\u015ft\u0131r\u0131lmas\u0131n\u0131 sa\u011flar.<\/p>\nsystemd<\/code> zamanlay\u0131c\u0131n\u0131n durumunu kontrol etmek i\u00e7in:<\/p>\nsudo systemctl status snap.certbot.renew.service\nsudo systemctl status snap.certbot.renew.timer<\/code><\/pre>\nE\u011fer Certbot’u APT ile kurduysan\u0131z, genellikle \/etc\/cron.d\/certbot<\/code> i\u00e7inde bir cron i\u015fi bulunur.<\/p>\nYenilemeyi Test Etme<\/h3>\n
Otomatik yenileme sisteminin do\u011fru \u00e7al\u0131\u015ft\u0131\u011f\u0131ndan emin olmak i\u00e7in bir “deneme s\u00fcr\u00fc\u015f\u00fc” yapabilirsiniz. Bu komut, ger\u00e7ek bir yenileme yapmadan s\u00fcreci sim\u00fcle eder:<\/p>\n
sudo certbot renew --dry-run<\/code><\/pre>\nE\u011fer bu komut ba\u015far\u0131l\u0131 bir \u015fekilde tamamlan\u0131rsa, otomatik yenileme i\u015fleminizin b\u00fcy\u00fck olas\u0131l\u0131kla sorunsuz \u00e7al\u0131\u015faca\u011f\u0131 anlam\u0131na gelir. Herhangi bir hata al\u0131rsan\u0131z, sorunu gidermeniz gerekecektir.<\/p>\n
\u00d6nemli:<\/strong> Standalone modu ile sertifika yenilerken de port 80’in (veya 443’\u00fcn) bo\u015f olmas\u0131 gerekir. E\u011fer sunucunuzda s\u00fcrekli \u00e7al\u0131\u015fan bir web sunucusu varsa, Certbot otomatik yenileme s\u0131ras\u0131nda bu servisi ge\u00e7ici olarak durdurup tekrar ba\u015flatmak i\u00e7in --pre-hook<\/code> ve --post-hook<\/code> se\u00e7eneklerini kullanabilir. Ancak bu durum genellikle Certbot’un Apache\/Nginx eklentileriyle \u00e7\u00f6z\u00fcld\u00fc\u011f\u00fc i\u00e7in Standalone modunda manuel durdurma\/ba\u015flatma daha yayg\u0131nd\u0131r.<\/p>\nSonu\u00e7 ve S\u0131k\u00e7a Sorulan Sorular (SSS)<\/h2>\n
Bu rehberde, Debian 10 \u00fczerinde Certbot Standalone modunu kullanarak Let’s Encrypt SSL sertifikalar\u0131n\u0131 nas\u0131l alaca\u011f\u0131n\u0131z\u0131, kuraca\u011f\u0131n\u0131z\u0131 ve otomatik olarak yenileyece\u011finizi \u00f6\u011frendiniz. Standalone modu, \u00f6zellikle mevcut bir web sunucusu olmayan veya sertifikay\u0131 farkl\u0131 bir hizmet i\u00e7in almak isteyen kullan\u0131c\u0131lar i\u00e7in son derece esnek ve kullan\u0131\u015fl\u0131 bir y\u00f6ntemdir. G\u00fcvenli bir internet i\u00e7in SSL sertifikalar\u0131n\u0131n \u00f6nemi g\u00f6z ard\u0131 edilemez ve Let’s Encrypt ile Certbot bu s\u00fcreci herkes i\u00e7in eri\u015filebilir k\u0131lmaktad\u0131r.<\/p>\n
S\u0131k\u00e7a Sorulan Sorular (SSS)<\/h3>\n\n- Standalone modu neden kullanmal\u0131y\u0131m?<\/dt>\n
- Sunucunuzda Apache veya Nginx gibi bir web sunucusu kurulu de\u011filse veya sertifikay\u0131 bir web sunucusu d\u0131\u015f\u0131nda bir hizmet (\u00f6rne\u011fin VPN, e-posta sunucusu) i\u00e7in almak istiyorsan\u0131z Standalone modu idealdir. Ayr\u0131ca, web sunucunuzun port 80\/443’\u00fc ge\u00e7ici olarak bo\u015faltabiliyorsan\u0131z da kullanabilirsiniz.<\/dd>\n
- Sertifika yenileme neden otomatik de\u011fil gibi g\u00f6r\u00fcn\u00fcyor?<\/dt>\n
- Certbot’u Snap ile kurdu\u011funuzda, otomatik yenileme i\u00e7in bir
systemd<\/code> zamanlay\u0131c\u0131 birimi kurulur ve bu, certbot renew<\/code> komutunu d\u00fczenli olarak \u00e7al\u0131\u015ft\u0131r\u0131r. APT ile kurduysan\u0131z, genellikle bir cron i\u015fi olu\u015fturulur. Yani, yenileme i\u015flemi zaten otomatiktir ve sizin manuel olarak \u00e7al\u0131\u015ft\u0131rman\u0131za gerek yoktur. Sadece yenilemeyi test etmek i\u00e7in --dry-run<\/code> komutunu kullanabilirsiniz.<\/dd>\n- Sertifika al\u0131rken “Port 80 is already in use” hatas\u0131 al\u0131yorum, ne yapmal\u0131y\u0131m?<\/dt>\n
- Bu hata, Certbot’un kendi ge\u00e7ici web sunucusunu ba\u015flatmas\u0131 gereken 80 numaral\u0131 portun ba\u015fka bir servis (\u00f6rne\u011fin Apache, Nginx) taraf\u0131ndan kullan\u0131ld\u0131\u011f\u0131n\u0131 g\u00f6sterir. Sertifika alma i\u015flemi s\u0131ras\u0131nda o servisi ge\u00e7ici olarak durdurman\u0131z gerekmektedir. \u00d6rne\u011fin:
sudo systemctl stop nginx<\/code> veya sudo systemctl stop apache2<\/code>. Sertifika al\u0131nd\u0131ktan sonra servisi tekrar ba\u015flatabilirsiniz: sudo systemctl start nginx<\/code>.<\/dd>\n- Wildcard (joker karakter) sertifikas\u0131 alabilir miyim?<\/dt>\n
- Certbot Standalone modu (HTTP-01 meydan okumas\u0131) wildcard sertifikalar\u0131 desteklemez. Wildcard sertifikalar\u0131 (\u00f6rne\u011fin,
*.example.com<\/code>) almak i\u00e7in “DNS-01” meydan okumas\u0131n\u0131 kullanman\u0131z gerekir. Bu, DNS sa\u011flay\u0131c\u0131n\u0131zda belirli bir TXT kayd\u0131 olu\u015fturmay\u0131 gerektirir ve certbot certonly --manual --preferred-challenges dns<\/code> gibi bir komutla manuel olarak veya DNS sa\u011flay\u0131c\u0131n\u0131z i\u00e7in uygun bir Certbot eklentisiyle otomatik olarak yap\u0131labilir.<\/dd>\n- Ald\u0131\u011f\u0131m sertifikay\u0131 Nginx veya Apache gibi bir web sunucusuyla nas\u0131l kullan\u0131r\u0131m?<\/dt>\n
- Sertifikalar\u0131n\u0131z
\/etc\/letsencrypt\/live\/example.com\/<\/code> dizininde bulunur. Web sunucunuzun yap\u0131land\u0131rma dosyas\u0131nda (\u00f6rne\u011fin Nginx’te nginx.conf<\/code> veya Apache’de sanal host dosyas\u0131), SSL b\u00f6l\u00fcm\u00fcnde ssl_certificate<\/code> ve ssl_certificate_key<\/code> y\u00f6nergelerini bu dosyalara (genellikle fullchain.pem<\/code> ve privkey.pem<\/code>) i\u015faret etmelisiniz. Yenileme sonras\u0131 web sunucunuzu yeniden y\u00fcklemeniz veya yeniden ba\u015flatman\u0131z gerekebilir.<\/dd>\n- Sertifikalar\u0131m\u0131 ba\u015fka bir sunucuya nas\u0131l ta\u015f\u0131yabilirim?<\/dt>\n
- Sertifika dosyalar\u0131n\u0131 (
fullchain.pem<\/code> ve privkey.pem<\/code>) \/etc\/letsencrypt\/live\/example.com\/<\/code> dizininden g\u00fcvenli bir \u015fekilde (\u00f6rne\u011fin scp<\/code> ile) kopyalayarak ba\u015fka bir sunucuya ta\u015f\u0131yabilirsiniz. Hedef sunucuda da bu dosyalar\u0131 ilgili dizinlere yerle\u015ftirip web sunucunuzu yap\u0131land\u0131rman\u0131z gerekir. Ancak, otomatik yenileme i\u015flevselli\u011fi i\u00e7in her sunucunun kendi Certbot kurulumuna sahip olmas\u0131 ve kendi sertifikalar\u0131n\u0131 ba\u011f\u0131ms\u0131z olarak yenilemesi \u00f6nerilir.<\/dd>\n<\/dl>\n<\/body><\/p>\n","protected":false},"excerpt":{"rendered":"Giri\u015f: Certbot Standalone Modu ve Let’s Encrypt\n G\u00fcn\u00fcm\u00fczde web sitelerinin g\u00fcvenli\u011fi, kullan\u0131c\u0131 deneyimi ve arama motoru s\u0131ralamalar\u0131 i","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[1],"tags":[],"class_list":{"0":"post-37432","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-genel","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"\n
Giri\u015f: Certbot Standalone Modu ve Let's Encrypt - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/giris-certbot-standalone-modu-ve-lets-encrypt\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Giri\u015f: Certbot Standalone Modu ve Let's Encrypt\" \/>\n<meta property=\"og:description\" content=\"Giri\u015f: Certbot Standalone Modu ve Let's Encrypt G\u00fcn\u00fcm\u00fczde web sitelerinin g\u00fcvenli\u011fi, kullan\u0131c\u0131 deneyimi ve arama motoru s\u0131ralamalar\u0131 i\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/giris-certbot-standalone-modu-ve-lets-encrypt\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2026-01-04T11:41:42+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"11 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/giris-certbot-standalone-modu-ve-lets-encrypt\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/giris-certbot-standalone-modu-ve-lets-encrypt\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"Giri\u015f: Certbot Standalone Modu ve Let’s Encrypt\",\"datePublished\":\"2026-01-04T11:41:42+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/giris-certbot-standalone-modu-ve-lets-encrypt\/\"},\"wordCount\":2082,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/giris-certbot-standalone-modu-ve-lets-encrypt\/#respond\"]}],\"copyrightYear\":\"2026\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/giris-certbot-standalone-modu-ve-lets-encrypt\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/giris-certbot-standalone-modu-ve-lets-encrypt\/\",\"name\":\"Giri\u015f: Certbot Standalone Modu ve Let's Encrypt - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2026-01-04T11:41:42+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/giris-certbot-standalone-modu-ve-lets-encrypt\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/giris-certbot-standalone-modu-ve-lets-encrypt\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/giris-certbot-standalone-modu-ve-lets-encrypt\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Giri\u015f: Certbot Standalone Modu ve Let’s Encrypt\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Giri\u015f: Certbot Standalone Modu ve Let's Encrypt - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/giris-certbot-standalone-modu-ve-lets-encrypt\/","og_locale":"tr_TR","og_type":"article","og_title":"Giri\u015f: Certbot Standalone Modu ve Let's Encrypt","og_description":"Giri\u015f: Certbot Standalone Modu ve Let's Encrypt G\u00fcn\u00fcm\u00fczde web sitelerinin g\u00fcvenli\u011fi, kullan\u0131c\u0131 deneyimi ve arama motoru s\u0131ralamalar\u0131 i","og_url":"https:\/\/fatihsoysal.com\/blog\/giris-certbot-standalone-modu-ve-lets-encrypt\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2026-01-04T11:41:42+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"11 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/giris-certbot-standalone-modu-ve-lets-encrypt\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/giris-certbot-standalone-modu-ve-lets-encrypt\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"Giri\u015f: Certbot Standalone Modu ve Let’s Encrypt","datePublished":"2026-01-04T11:41:42+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/giris-certbot-standalone-modu-ve-lets-encrypt\/"},"wordCount":2082,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/giris-certbot-standalone-modu-ve-lets-encrypt\/#respond"]}],"copyrightYear":"2026","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/giris-certbot-standalone-modu-ve-lets-encrypt\/","url":"https:\/\/fatihsoysal.com\/blog\/giris-certbot-standalone-modu-ve-lets-encrypt\/","name":"Giri\u015f: Certbot Standalone Modu ve Let's Encrypt - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2026-01-04T11:41:42+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/giris-certbot-standalone-modu-ve-lets-encrypt\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/giris-certbot-standalone-modu-ve-lets-encrypt\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/giris-certbot-standalone-modu-ve-lets-encrypt\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Giri\u015f: Certbot Standalone Modu ve Let’s Encrypt"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/37432","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=37432"}],"version-history":[{"count":1,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/37432\/revisions"}],"predecessor-version":[{"id":37433,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/37432\/revisions\/37433"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=37432"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=37432"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=37432"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}