嘟嘟社区

[美国VPS] 为你宝塔面板一键开启HTTPS登陆+自动续期（面板+站点）

moe

本帖最后由 帝玺SSL 于 2022-8-10 03:53 编辑

阅读 https://www1.hi.cn/docs/best-practice/secure-aapanel-https

总结起来就是一段SSH命令：

  1. email="[email protected]" # 记得修改成你的邮箱
  2. ip=$(curl -s -4 ip.sb)
  3. webroot=$(cat $((grep -r " "$ip /www/server/panel/vhost/nginx/ || grep -r "default_server" /www/server/panel/vhost/nginx/) | grep server_name | awk ‘{print $1}’ | cut -d ‘:’ -f1) | egrep ‘root ‘ | awk ‘{print $2}’ | cut -d ‘;’ -f1)
  5. if [ -z "$webroot" ]; then
  6.   echo "请先创建1个IP站点或者设置1个默认站点！"
  7.   exit 1
  8. fi
  10. export LE_WORKING_DIR=/root/.acme.sh
  12. /bin/cp -rf /www/server/panel/ssl/privateKey.pem /www/server/panel/ssl/privateKey.pem.bak
  13. /bin/cp -rf /www/server/panel/ssl/certificate.pem /www/server/panel/ssl/certificate.pem.bak
  14. /bin/cp -rf /www/server/panel/vhost/cert/$ip/privkey.pem /www/server/panel/vhost/cert/$ip/privkey.pem.bak
  15. /bin/cp -rf /www/server/panel/vhost/cert/$ip/fullchain.pem /www/server/panel/vhost/cert/$ip/fullchain.pem.bak
  17. /root/.acme.sh/acme.sh –register-account
  18.     –email $email
  19.     –server https://acme.hi.cn/directory &&
  20.    
  21. /root/.acme.sh/acme.sh –issue
  22.     -d $ip –webroot $webroot
  23.     –server https://acme.hi.cn/directory
  24.     –force &&
  25.    
  26. echo "复制宝塔面板证书" &&
  27. /bin/cp -rf /root/.acme.sh/$ip/$ip.key /www/server/panel/ssl/privateKey.pem &&
  28. /bin/cp -rf /root/.acme.sh/$ip/fullchain.cer /www/server/panel/ssl/certificate.pem &&
  29.    
  30. echo "True" > /www/server/panel/data/ssl.pl &&
  31.    
  32. bt reload &&
  33.    
  34. echo "安装站点证书（如有）" &&
  35. /bin/cp -rf /root/.acme.sh/$ip/$ip.key /www/server/panel/vhost/cert/$ip/privkey.pem &&
  36. /bin/cp -rf /root/.acme.sh/$ip/fullchain.cer /www/server/panel/vhost/cert/$ip/fullchain.pem &&
  37.    
  38. bt reload &&
  39.    
  40. echo "成功续期"

复制代码
ECC 通配符 10 块一年是吧
沪ICP备20022337号-17
前排占个坑再说，马克