9
0
0
【SSL】证书、工作原理
文章摘要
原理
的
安装 certbot
# 安装
sudo dnf install certbot python3-certbot-nginx
# 触发对话式安装,输入邮箱,然后Y,Y即可
sudo certbot --nginx -d your-domain.com -d www.your-domain.comNginx 反向代理
# 后面带#的都是certbox配置好后自行添加的
# 服务器平台的安全组放行,防火墙放行
upstream halo {
server 127.0.0.1:8090;
}
server {
server_name liuxiaoliang.com www.liuxiaoliang.com;
client_max_body_size 10m;
location / {
proxy_pass http://halo;
proxy_set_header HOST $host;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/letsencrypt/live/liuxiaoliang.com/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/liuxiaoliang.com/privkey.pem; # managed by Certbot
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
if ($host = www.liuxiaoliang.com) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = liuxiaoliang.com) {
return 301 https://$host$request_uri;
} # managed by Certbot
listen 80;
server_name liuxiaoliang.com www.liuxiaoliang.com;
return 404; # managed by Certbot
}