添加acme,frps和nginx项目
This commit is contained in:
62
acme/README.md
Normal file
62
acme/README.md
Normal file
@@ -0,0 +1,62 @@
|
||||
## 前期准备
|
||||
|
||||
主要是接下来安装acme时的gfw问题。如果是境内服务器,则有可能需要如下步骤。
|
||||
|
||||
1. 小飞机的局域网内的代理地址。因为get.acme.sh中包含的脚本请求地址可能会被墙
|
||||
|
||||
`export http_proxy="172.18.184.139:10082"`
|
||||
|
||||
`export https_proxy="172.18.184.139:10082"`
|
||||
|
||||
2. 是因为据说在此加入上面的export命令可以实现开机自动开启代理。但没有尝试
|
||||
|
||||
`vim /etc/bashrc`
|
||||
|
||||
3. 同上
|
||||
|
||||
`vim /etc/profile`
|
||||
|
||||
## 安装acme
|
||||
|
||||
1. 安装acme
|
||||
|
||||
`curl https://get.acme.sh | sh`
|
||||
|
||||
2. 将dns api的key和secret存入环境变量。此处为阿里云,事前已经给对应SAM子账户分配了FullDnsApiAccess的权限。参见: https://blog.csdn.net/chen249191508/article/details/98088553
|
||||
|
||||
`export Ali_Key="key"`
|
||||
|
||||
`export Ali_Secret="secret"`
|
||||
|
||||
参见保密区域获取真实内容。注意,阿里云的控制台中,这两个值只在添加SAM子账户的时候出现,需要马上自行保存
|
||||
|
||||
## 获取证书
|
||||
|
||||
1. 申请安装证书。加--debug参数可以显示更多细节
|
||||
|
||||
`acme.sh --debug --issue --dns dns_ali -d dev.woyue.org -d *.dev.woyue.org`
|
||||
|
||||
2. 安装完毕后,检验是否配置自动任务
|
||||
|
||||
`crontab -e`
|
||||
|
||||
3. 确认当前证书
|
||||
|
||||
`acme.sh --list`
|
||||
|
||||
## 安装证书
|
||||
|
||||
1. 复制证书:
|
||||
|
||||
mkdir -p /srv/certbot/conf/live/dev.woyue.org
|
||||
|
||||
acme.sh --installcert -d dev.woyue.org -d *.dev.woyue.org \
|
||||
--key-file /srv/certbot/conf/live/dev.woyue.org/privkey.pem \
|
||||
--fullchain-file /srv/certbot/conf/live/dev.woyue.org/fullchain.pem \
|
||||
--reloadcmd "docker restart nginxdocker_nginx_1"
|
||||
|
||||
注意,最后的nginxdocker_nginx_1为nginx容器的名称。请根据实际情况修改。**或不加此参数,手动重启nginx**。
|
||||
|
||||
2. 生成:dhparams文件
|
||||
|
||||
openssl dhparam -out /srv/certbot/conf/ssl-dhparams.pem 2048
|
||||
18
acme/acme.projitems
Normal file
18
acme/acme.projitems
Normal file
@@ -0,0 +1,18 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<Project xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
|
||||
<PropertyGroup>
|
||||
<MSBuildAllProjects>$(MSBuildAllProjects);$(MSBuildThisFileFullPath)</MSBuildAllProjects>
|
||||
<HasSharedItems>true</HasSharedItems>
|
||||
<SharedGUID>e02725fd-aeb7-4d76-9390-e083e78237c5</SharedGUID>
|
||||
</PropertyGroup>
|
||||
<PropertyGroup Label="Configuration">
|
||||
<Import_RootNamespace>acme</Import_RootNamespace>
|
||||
</PropertyGroup>
|
||||
<ItemGroup>
|
||||
<None Include="$(MSBuildThisFileDirectory)README.md" />
|
||||
</ItemGroup>
|
||||
<ItemGroup>
|
||||
<Folder Include="$(MSBuildThisFileDirectory)certbot\conf\" />
|
||||
<Folder Include="$(MSBuildThisFileDirectory)certbot\www\" />
|
||||
</ItemGroup>
|
||||
</Project>
|
||||
13
acme/acme.shproj
Normal file
13
acme/acme.shproj
Normal file
@@ -0,0 +1,13 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<Project ToolsVersion="15.0" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
|
||||
<PropertyGroup Label="Globals">
|
||||
<ProjectGuid>e02725fd-aeb7-4d76-9390-e083e78237c5</ProjectGuid>
|
||||
<MinimumVisualStudioVersion>14.0</MinimumVisualStudioVersion>
|
||||
</PropertyGroup>
|
||||
<Import Project="$(MSBuildExtensionsPath)\$(MSBuildToolsVersion)\Microsoft.Common.props" Condition="Exists('$(MSBuildExtensionsPath)\$(MSBuildToolsVersion)\Microsoft.Common.props')" />
|
||||
<Import Project="$(MSBuildExtensionsPath32)\Microsoft\VisualStudio\v$(VisualStudioVersion)\CodeSharing\Microsoft.CodeSharing.Common.Default.props" />
|
||||
<Import Project="$(MSBuildExtensionsPath32)\Microsoft\VisualStudio\v$(VisualStudioVersion)\CodeSharing\Microsoft.CodeSharing.Common.props" />
|
||||
<PropertyGroup />
|
||||
<Import Project="acme.projitems" Label="Shared" />
|
||||
<Import Project="$(MSBuildExtensionsPath32)\Microsoft\VisualStudio\v$(VisualStudioVersion)\CodeSharing\Microsoft.CodeSharing.CSharp.targets" />
|
||||
</Project>
|
||||
Reference in New Issue
Block a user