Taijicoder Wiki

systemctl stop nginx

add-apt-repository ppa:certbot/certbot
apt-get update
apt-get install python-certbot-nginx

cd /etc/nginx
mkdir ssl
cd /etc/nginx/ssl
openssl dhparam -out dhparam.pem 2048

certbot certonly --standalone --email <xxx>@<xxxmail.com> -d <xxx>.com -d www.<xxx>.com

server {
       listen 443 ssl http2;
       listen [::]:443 ssl http2;

        ssl_certificate /etc/letsencrypt/live/maoyouhui.cc/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/maoyouhui.cc/privkey.pem;
        ssl_dhparam         /etc/nginx/ssl/dhparam.pem;

        server_name maoyouhui.cc www.maoyouhui.cc;
	root /www/wwwroot/maoyouhui.cc;

        location / {
	      index index.html index.htm;
         }
}

server {
       listen         80;
       listen    [::]:80;
       server_name    maoyouhui.cc www.maoyouhui.cc;
       return         301 https://$server_name$request_uri;
}