COPY from https://github.com/xdtianyu/scripts/tree/master/lets-encrypt
在xdtianyu基础上修改了2个重要的参数
A shell script to get/update Let's encrypt certs quickly. 中文
This script uses acme_tiny.py to auth, fetch and update cert,no need for other dependency.
Download
wget https://raw.githubusercontent.com/carpliyz/Lets-encrypt/master/letsencrypt.conf
wget https://raw.githubusercontent.com/carpliyz/Lets-encrypt/master/letsencrypt.sh
chmod +x letsencrypt.sh
Configuration
Only modify DOMAIN_KEY DOMAIN_DIR DOMAINS to yours.
ACCOUNT_KEY="letsencrypt-account.key"
DOMAIN_KEY="example.com.key"
DOMAIN_DIR="/var/www/example.com"
DOMAINS="DNS:example.com,DNS:whatever.example.com"
key files will be gererated automatically.
Run
./letsencrypt.sh letsencrypt.conf
Attention
Domain name need bind to DOMAIN_DIR
e.g. /var/www/example.com
,that is to say visit http://example.com
http://whatever.example.com
can get into /var/www/example.com
directory,this is used to verify your domain.
cron task
Update the certs every month,you can add your command to the end of script to reload your service, e.g. service nginx reload
0 0 1 * * /etc/nginx/certs/letsencrypt.sh /etc/nginx/certs/letsencrypt.conf >> /var/log/lets-encrypt.log 2>&1