1. 程式人生 > >https + nginx配置步驟以及證書生成

https + nginx配置步驟以及證書生成

  1. 下載正式生成程式
  2. 生成證書:./certbot-auto certonly --standalone -w /var/www/xxx  -xxx.xxx.com -d www.xxxx.com    其中:--standalone(無需指定專案根目錄)   /var/www/xxx目錄要先建立   -xxx.xxx.com -d www.xxxx.com  是要使用證書的兩個域名
  3. nginx配置:

(自動跳轉https)

server {

        listen 80;

        server_name xxxx.com;

        rewrite ^(.*) https://xxxx.com$1 permanent;

    }   

    

    server {

       listen       443;

       server_name  xxxx.com;

       ssl on;

       ssl_certificate /etc/letsencrypt/live/xxxx.com/fullchain.pem;

       ssl_certificate_key /etc/letsencrypt/live/

xxxx.com/privkey.pem;               

    }