https + nginx配置步驟以及證書生成
阿新 • • 發佈:2018-11-20
- 下載正式生成程式
- 生成證書:./certbot-auto certonly --standalone -w /var/www/xxx -xxx.xxx.com -d www.xxxx.com 其中:--standalone(無需指定專案根目錄) /var/www/xxx目錄要先建立 -xxx.xxx.com -d www.xxxx.com 是要使用證書的兩個域名
- nginx配置:
(自動跳轉https)
server {
listen 80;
server_name xxxx.com;
rewrite ^(.*) https://xxxx.com$1 permanent;
}
server {
listen 443;
server_name xxxx.com;
ssl on;
ssl_certificate /etc/letsencrypt/live/xxxx.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/ xxxx.com/privkey.pem;
}