# 安装 Let's Encrypt
- Debian / Ubuntu
sudo apt-get install letsencrypt |
- Redhat / CentOS
sudo yum install epel-release | |
sudo yum install letsencrypt |
- Others (python)
sudo pip install letsencrypt |
# 关闭 nginx & 获取证书
sudo service nginx stop | |
letsencrypt certonly --standalone -d your.domian -d another.domian |
# 修改配置
# 开启 https
server { | |
listen 443; | |
listen [::]:443; | |
server_name your.domain; | |
ssl on; | |
ssl_certificate /etc/letsencrypt/live/your.domain/fullchain.pem; | |
ssl_certificate_key /etc/letsencrypt/live/your.domain/privkey.pem; | |
ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2; | |
ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH"; | |
ssl_prefer_server_ciphers on; | |
# other config | |
} |
# 开启重定向
server { | |
listen 80; | |
listen [::]:80; | |
server_name your.domain; | |
return 301 https://$server_name$request_uri; | |
} |
# 开启 nginx 服务
sudo service nginx start |
