sudo apt-get install letsencrypt
2018年9月14日1.安装
|
1 2 |
sudo apt-get install update sudo apt-get install letsencrypt |
2.生成证书
|
1 |
certbot certonly -d wy.zfajax.com |
3.证书默认目录
4.配置证书
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 |
server { listen 80; server_name shop.zfajax.com; location / { return 301 https://shop.zfajax.com$request_uri; } } server { listen 443 ssl http2; server_name shop.zfajax.com; root "/var/www/shop.zfajax/public"; index index.html index.htm index.php; charset utf-8; location / { try_files $uri $uri/ /index.php?$query_string; } location = /favicon.ico { access_log off; log_not_found off; } location = /robots.txt { access_log off; log_not_found off; } access_log off; error_log /var/log/nginx/shop.zfajax-error.log error; sendfile off; client_max_body_size 100m; location ~ \.php$ { fastcgi_split_path_info ^(.+\.php)(/.+)$; fastcgi_pass unix:/var/run/php/php7.2-fpm.sock; fastcgi_index index.php; include fastcgi_params; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; fastcgi_intercept_errors off; fastcgi_buffer_size 16k; fastcgi_buffers 4 16k; fastcgi_connect_timeout 300; fastcgi_send_timeout 300; fastcgi_read_timeout 300; } location ~ /\.ht { deny all; } ssl_certificate /etc/nginx/ssl/shop.zfajax.com-0002/fullchain1.pem; ssl_certificate_key /etc/nginx/ssl/shop.zfajax.com-0002/privkey1.pem; ssl_trusted_certificate /etc/nginx/ssl/shop.zfajax.com-0002/fullchain1.pem; } |
