利用certbot 来跟新 let's encrypt 自动生成ssl(https)

Nginx 批改网

已有网址先配置好

location ~/.well-known/acme-challenge/ {
            root /data/ssl/vue.penly.cn/webroot;
            break;
 }

先用docker生成

docker run -it --rm \
-v /data/ssl/vue.penly.cn/certs:/etc/letsencrypt \
-v /data/ssl/vue.penly.cn/certs:/var/lib/letsencrypt \
-v /data/ssl/vue.penly.cn/certs:/var/log/letsencrypt \
-v /data/ssl/vue.penly.cn/webroot:/data/letsencrypt \
certbot/certbot certonly \
--webroot \
--agree-tos \
--webroot-path=/data/letsencrypt \
-m abc@qq.com \
-d vue.penly.cn 

获取到ssl 后 再配置证书

listen     443 ssl
ssl_certificate       /data/ssl/vue.penly.cn/certs/live/vue.penly.cn/fullchain.pem;          
ssl_certificate_key  /data/ssl/vue.penly.cn/certs/live/vue.penly.cn/privkey.pem;

使用DNS 验证码

docker run -it --rm \
certbot/certbot certonly \
--manual --preferred-challenges=dns \
--email ydlhero@gmail.com --server https://acme-v02.api.letsencrypt.org/directory \
-d "*.open-hk.com"

docker run -it --rm \
-v /data/ssl/vue.penly.cn/certs:/etc/letsencrypt \
certbot/certbot certonly \
--manual --preferred-challenges=dns \
--email ydlhero@gmail.com --server https://acme-v02.api.letsencrypt.org/directory \
-d "*.openai-hk.com"

docker run -it --rm \
-v /data/ssl/certs:/etc/letsencrypt \
certbot/certbot certonly \
--manual --preferred-challenges=dns \
--email ydlhero@gmail.com --server https://acme-v02.api.letsencrypt.org/directory \
-d "*.aibeke.com"

更多参考
续费等操作参考文档