Update installer_base.lib.php to attend to comment ispconfig/ispconfig3!911 (comment 69118). Not sure if this could fix the compatibality for php5.3 which is still supported by current version of ISPConfig but seems that solution is being used in interface/lib/classes/functions.inc.php. This suggestion solution for php5.3 is not tested.

Update letsencrypt_renew_hook.sh to support Red Hat, Centos or its derivatives; as well as restarting mysql and/or mariadb as letsencrypt can be use to secure them as well.

Update installer_base.lib.php to remove chmod, chown and symlink for letsencrypt_renew_hook.sh during install that was added earlier as it will not be required except until after LE SSL certs renewal.

Add new file to support the recreation of ispserver.pem after each and every successful ISPConfig Server LE SSL certs renewal for other related services and to reload or restart them thereafter.

Update installer_base.lib.php to add renew-hook for the purpose of automatically re-creating ispserver.pem and re-extending it to other services and re-loading or re-starting that other services. In certbot and acme.sh --renew-hook won't be run until renewal. This added code however is not fully tested yet.

Update letsencrypt_post_hook.sh to check for OS and other firewall or use iptables. Not fully tested.

Update letsencrypt_pre_hook.sh to check for OS and other firewall or use iptables. Not fully tested.

Update installer_base.lib.php to reorganize priority i.e. to attempt to use acme.sh first if it is available, only if it is not, then we attempt certbot, if the later then is available.

Update installer_base.lib.php to remove ufw and add letsencrypt pre and post hook scripts. Before ISPConfig is installed, a temporary link will be created for the scripts. The link will be removed and updated during install.

Add new file "letsencrypt_post_hook.sh" to support letsencrypt standalone during ISPConfig installation or update for non-webservers. Webservers shall always use webroot.

Add new file "letsencrypt_pre_hook.sh" to support letsencrypt standalone during ISPConfig installation or update for non-webservers. Webservers shall always use webroot.

Update installer_base.lib.php to add check to UFW and install it if it is not installed and post-hook will only be added if the default closed port 80 (http). Port 443 (https) is dropped as it is not required for standalone.

Update installer_base.lib.php to add pre-hook and post-hook to standalone command both certbot and acme.sh.

Update installer_base.lib.php to create LE live directory for the hostname if acme.sh is available, as it is not present in the first place, unlike certbot that creates it when creating LE SSL certs.

Update installer_base.lib.php as le client must be reset immediately after exploding it with which command.

Update update.php to allow LE SSL certs to be created on ISPConfig non web server upon existing update.

Update install.php to allow LE SSL certs to be created on ISPConfig non web server upon new installation.

Update installer_base.lib.php to get LE SSL certs for the server via certbot or acme.sh before openssl self-signed method upon new installation or existing update; and extend it to other available services (postfix, pure-ftpd-mysql), with additional dhparam pem file, if none exists.

Put http to https redirect before SEO in Nginx virtualhost.

See merge request ispconfig/ispconfig3!907

fixed typo

See merge request !909

It makes better the compliance with HSTS, http to https redirect must be done before domain to www.domain.