Все по инструкции
https://certbot.eff.org/#ubuntutrusty-nginx
-------------------
wget https://dl.eff.org/certbot-auto
chmod a+x certbot-auto
./certbot-auto certonly --webroot -w /var/www/site.net -d site.net -d www.site.net
конфиг NGINX
server {
listen 443 ssl;
listen [::]:443 ssl;
listen 80;
listen [::]:80;
.........
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers "HIGH:!RC4:!aNULL:!MD5:!kEDH";
add_header Strict-Transport-Security 'max-age=604800';
ssl_certificate /etc/letsencrypt/live/site.net/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/site.net/privkey.pem;
...............
}
service nginx restart
UPDATE sertificate
sudo ./certbot-auto renew
Комментариев нет :
Отправить комментарий