1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27

server {
    listen 443 ssl;
    server_name a.baozongwi.xyz;

    # SSL 证书和私钥的路径
    ssl_certificate /etc/nginx/a.baozongwi.xyz_bundle.crt;
    ssl_certificate_key /etc/nginx/a.baozongwi.xyz.key;

    # 支持的 SSL 协议
    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_ciphers HIGH:!aNULL:!MD5;   # 配置安全的加密算法

    # 设置文件路径
    root /var/www/html;  # 确保这里指向你的网页根目录
    index index.html index.htm;

    location / {
        try_files $uri $uri/ =404;  # 如果找不到文件则返回 404
    }

    # 强制 HTTP 到 HTTPS 的重定向
    error_page 497 https://$host$request_uri;

    # 可选：配置日志
    access_log /var/log/nginx/a.baozongwi.xyz.access.log;
    error_log /var/log/nginx/a.baozongwi.xyz.error.log;
}

1
2
3
4
5
6

sudo apt update
sudo apt install snapd
sudo systemctl start snapd
sudo systemctl enable snapd

snap version

1
2

sudo snap install --classic certbot
sudo ln -s /snap/bin/certbot /usr/bin/certbot

1

sudo certbot --nginx

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41

root@dkhkdZNfqWuIjxnYiAla:/var/www/html# sudo certbot --nginx
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Enter email address or hit Enter to skip.
 (Enter 'c' to cancel): 2xxxxxxxxxxxxxxxxx5@qq.com

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Please read the Terms of Service at:
https://letsencrypt.org/documents/LE-SA-v1.5-February-24-2025.pdf
You must agree in order to register with the ACME server. Do you agree?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
(Y)es/(N)o: Y

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Would you be willing, once your first certificate is successfully issued, to
share your email address with the Electronic Frontier Foundation, a founding
partner of the Let's Encrypt project and the non-profit organization that
develops Certbot? We'd like to send you email about our work encrypting the web,
EFF news, campaigns, and ways to support digital freedom.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
(Y)es/(N)o: Y
Account registered.
Please enter the domain name(s) you would like on your certificate (comma and/or
space separated) (Enter 'c' to cancel): rb3.top
Requesting a certificate for rb3.top

Successfully received certificate.
Certificate is saved at: /etc/letsencrypt/live/rb3.top/fullchain.pem
Key is saved at:         /etc/letsencrypt/live/rb3.top/privkey.pem
This certificate expires on 2025-07-15.
These files will be updated when the certificate renews.
Certbot has set up a scheduled task to automatically renew this certificate in the background.

Deploying certificate
Successfully deployed certificate for rb3.top to /etc/nginx/sites-enabled/default
Congratulations! You have successfully enabled HTTPS on https://rb3.top

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
If you like Certbot, please consider supporting our work by:
 * Donating to ISRG / Let's Encrypt:   https://letsencrypt.org/donate
 * Donating to EFF:                    https://eff.org/donate-le
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

1
2
3
4

sudo crontab -e

# 写入
0 0 */30 * * /usr/bin/certbot renew --dry-run --quiet

1

sudo crontab -l