letsencrypt

安装

yum install certbot

./certbot certonly -n --standalone  --pre-hook "systemctl stop nginx" --post-hook "systemctl start nginx" -d www.idyi.net --email xxx@xxx.com --agree-tos

server {
listen      80;
server_name www.idyi.net idyi.net ;
rewrite ^/(.*) https://www.idyi.net/$1 permanent;
}

server {
listen       443 ;
server_name  www.idyi.net;
ssl on;
ssl_certificate /etc/letsencrypt/live/www.idyi.net/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/www.idyi.net/privkey.pem;
...

crontab -e
0 5 1 * * certbot renew --quiet --pre-hook "systemctl stop nginx" --post-hook "systemctl start nginx"