增加 route53通配符说明

This commit is contained in:
Your Name
2024-06-14 08:41:53 +00:00
parent f33a13a7b8
commit b702f3357e
+7 -28
View File
@@ -17,38 +17,17 @@ sudo certbot certonly --standalone
# 手动填写信息, 等待注册完成 # 手动填写信息, 等待注册完成
# 此处会生成证书 # 此处会生成证书
``` ```
(可选)通配符证书-route53 [说明文档](https://eff-certbot.readthedocs.io/en/latest/using.html#dns-plugins)
```sh
sudo snap set certbot trust-plugin-with-root=ok
sudo snap install certbot-dns-route53
sudo certbot certonly --dns-route53 -d example.com -d *.example.com -d *.example1.com -m user@example.com
```
### 如果是docker中, 则还需要将证书文件拷贝到容器中去 ### 如果是docker中, 则还需要将证书文件拷贝到容器中去
```bash ```bash
sudo cp -r /etc/letsencrypt/archive/*.huangguanpc.com Lotter/ssl sudo cp -r /etc/letsencrypt/archive/*.huangguanpc.com /ssl
```
修改Dockerfile, 将证书拷贝进容器中
```dockerfile
COPY ssl /ssl
``` ```
修改nginx.cnf
```yml
# 1. 原80需转发到443
# 2. 增加证书信息
listen 80 ;
server_name *.huangguanpc.com;
rewrite ^(.*) https://$server_name$1 permanent;
}
server {
listen 443 ssl;
server_name *.huangguanpc.com;
ssl_certificate /ssl/fullchain1.pem;
ssl_certificate_key /ssl/privkey1.pem;
```
修改dockercompose.yml的web, 增加443端口
```yml
- '443:443'
```