增加 route53通配符说明
This commit is contained in:
+7
-28
@@ -17,38 +17,17 @@ sudo certbot certonly --standalone
|
||||
# 手动填写信息, 等待注册完成
|
||||
# 此处会生成证书
|
||||
```
|
||||
(可选)通配符证书-route53 [说明文档](https://eff-certbot.readthedocs.io/en/latest/using.html#dns-plugins)
|
||||
```sh
|
||||
sudo snap set certbot trust-plugin-with-root=ok
|
||||
sudo snap install certbot-dns-route53
|
||||
sudo certbot certonly --dns-route53 -d example.com -d *.example.com -d *.example1.com -m user@example.com
|
||||
```
|
||||
|
||||
### 如果是docker中, 则还需要将证书文件拷贝到容器中去
|
||||
|
||||
```bash
|
||||
sudo cp -r /etc/letsencrypt/archive/*.huangguanpc.com Lotter/ssl
|
||||
```
|
||||
|
||||
修改Dockerfile, 将证书拷贝进容器中
|
||||
```dockerfile
|
||||
COPY ssl /ssl
|
||||
sudo cp -r /etc/letsencrypt/archive/*.huangguanpc.com /ssl
|
||||
```
|
||||
|
||||
|
||||
修改nginx.cnf
|
||||
```yml
|
||||
# 1. 原80需转发到443
|
||||
# 2. 增加证书信息
|
||||
|
||||
listen 80 ;
|
||||
server_name *.huangguanpc.com;
|
||||
rewrite ^(.*) https://$server_name$1 permanent;
|
||||
}
|
||||
|
||||
server {
|
||||
listen 443 ssl;
|
||||
server_name *.huangguanpc.com;
|
||||
ssl_certificate /ssl/fullchain1.pem;
|
||||
ssl_certificate_key /ssl/privkey1.pem;
|
||||
```
|
||||
|
||||
修改dockercompose.yml的web, 增加443端口
|
||||
```yml
|
||||
- '443:443'
|
||||
```
|
||||
|
||||
|
||||
Reference in New Issue
Block a user