增加 route53通配符说明
This commit is contained in:
+7
-28
@@ -17,38 +17,17 @@ sudo certbot certonly --standalone
|
|||||||
# 手动填写信息, 等待注册完成
|
# 手动填写信息, 等待注册完成
|
||||||
# 此处会生成证书
|
# 此处会生成证书
|
||||||
```
|
```
|
||||||
|
(可选)通配符证书-route53 [说明文档](https://eff-certbot.readthedocs.io/en/latest/using.html#dns-plugins)
|
||||||
|
```sh
|
||||||
|
sudo snap set certbot trust-plugin-with-root=ok
|
||||||
|
sudo snap install certbot-dns-route53
|
||||||
|
sudo certbot certonly --dns-route53 -d example.com -d *.example.com -d *.example1.com -m user@example.com
|
||||||
|
```
|
||||||
|
|
||||||
### 如果是docker中, 则还需要将证书文件拷贝到容器中去
|
### 如果是docker中, 则还需要将证书文件拷贝到容器中去
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
sudo cp -r /etc/letsencrypt/archive/*.huangguanpc.com Lotter/ssl
|
sudo cp -r /etc/letsencrypt/archive/*.huangguanpc.com /ssl
|
||||||
```
|
|
||||||
|
|
||||||
修改Dockerfile, 将证书拷贝进容器中
|
|
||||||
```dockerfile
|
|
||||||
COPY ssl /ssl
|
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|
||||||
修改nginx.cnf
|
|
||||||
```yml
|
|
||||||
# 1. 原80需转发到443
|
|
||||||
# 2. 增加证书信息
|
|
||||||
|
|
||||||
listen 80 ;
|
|
||||||
server_name *.huangguanpc.com;
|
|
||||||
rewrite ^(.*) https://$server_name$1 permanent;
|
|
||||||
}
|
|
||||||
|
|
||||||
server {
|
|
||||||
listen 443 ssl;
|
|
||||||
server_name *.huangguanpc.com;
|
|
||||||
ssl_certificate /ssl/fullchain1.pem;
|
|
||||||
ssl_certificate_key /ssl/privkey1.pem;
|
|
||||||
```
|
|
||||||
|
|
||||||
修改dockercompose.yml的web, 增加443端口
|
|
||||||
```yml
|
|
||||||
- '443:443'
|
|
||||||
```
|
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user