nibula 1.4.0 → 1.4.1

package/CHANGELOG.md

@@ -5,6 +5,22 @@ All notable changes to Nibula are documented here.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.4.1] - 2026-08-03
+
+### Added
+- `nginx.conf` header now documents the full setup: package install,
+  certificate issuance with `certbot --cert-name`, auto-renew, and the
+  `sites-available` → `sites-enabled` steps.
+- Troubleshooting table covering the errors whose message points elsewhere
+  than the actual cause: `nginx -t` without sudo, wrong certificate name,
+  certificate not covering the domain, nginx < 1.25, missing `404.html`,
+  DNS not pointing to the server.
+
+### Changed
+- Certificates are now issued with `--cert-name SITE_NAME`, so the directory
+  under `/etc/letsencrypt/live/` matches the site name and `YOUR_CERTIFICATE`
+  is easier to fill in.
+
 ## [1.4.0] - 2026-08-03
 
 ### Changed

package/nginx.conf

@@ -3,31 +3,49 @@
 #  Static site + optional HTTP backend on 127.0.0.1:3000. PHP not handled.
 # -----------------------------------------------------------------------------
 #  REPLACE
+#
 #    YOUR_DOMAIN        server_name, twice (port 80 and 443)
 #    SITE_FOLDER        document root under /var/www/
-#    YOUR_CERTIFICATE   dir under /etc/letsencrypt/live/ — not always the same
+#
+#    YOUR_CERTIFICATE   dir under /etc/letsencrypt/live/ — not always the sam
 #                       as YOUR_DOMAIN. Check: sudo certbot certificates
 #
-#  REQUIRES
-#    valid certificate covering YOUR_DOMAIN
-#    /var/www/SITE_FOLDER/404.html readable by nginx
-#    nginx >= 1.25 for the http2 directive
+#    SITE_NAME          (commands below) name of this file and of the
+#                       certificate; any short name, never appears in URLs
+#
+#
+#  1. INSTALL (skip if already present)
+#     sudo apt update
+#     sudo apt install -y nginx certbot python3-certbot-nginx
+#     nginx -v                        # >= 1.25 for the http2 directive
+#
+#  2. CERTIFICATE (before enabling the site — nginx won't start without it)
+#     dig +short YOUR_DOMAIN A        # must return this server's public IP
+#     sudo certbot certonly --nginx --cert-name SITE_NAME -d YOUR_DOMAIN
+#     sudo systemctl enable --now certbot.timer      # auto-renew every 90 days
 #
-#  ENABLE
-#    sudo ln -s /etc/nginx/sites-available/FILE /etc/nginx/sites-enabled/
-#    sudo nginx -t && sudo systemctl reload nginx
-#    curl -I https://YOUR_DOMAIN/nonexistent          # expect 404
+#  3. INSTALL THE SITE
+#     sudo cp nginx.conf /etc/nginx/sites-available/SITE_NAME
+#     sudo nano /etc/nginx/sites-available/SITE_NAME
+#     sudo ln -s /etc/nginx/sites-available/SITE_NAME /etc/nginx/sites-enabled/
+#     sudo nginx -t && sudo systemctl reload nginx
 #
 #  IF IT FAILS
-#    "cannot load certificate ... Permission denied"  → run nginx -t with sudo
-#    500 instead of 404                               → 404.html missing
+#    cannot load certificate ... Permission denied  → nginx -t needs sudo
+#    cannot load certificate ... No such file       → wrong certificate name
+#    no alternative certificate subject name        → cert doesn't cover domain
+#    unknown directive "http2"                      → nginx < 1.25
+#    500 instead of the 404 page                    → 404.html missing
+#    NXDOMAIN / timeout during certbot              → DNS not pointing here
 # =============================================================================
 
-### HTTP -> HTTPS redirect
+# HTTP (80) configuration
 server {
+
+    server_name YOUR_DOMAIN;
+
     listen      80;
     listen      [::]:80;
-    server_name YOUR_DOMAIN;
 
     # Webroot ACME renewal; drop if using the nginx authenticator.
     location ^~ /.well-known/acme-challenge/ {
@@ -39,6 +57,7 @@ server {
     }
 }
 
+# HTTPS (443) configuration
 server {
 ### Essentials
     listen      443 ssl;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nibula",
-  "version": "1.4.0",
+  "version": "1.4.1",
   "description": "A beginner-friendly static site generator built on Eleventy that stays close to vanilla HTML, CSS and JS — with a page-management CLI, an optional PHP backend, and SEO files generated for you.",
   "keywords": [
     "static-site-generator",