autocert 与 nginx的配合

autocert 负责生成SSL证书, 生成的证书配置在nginx中, nginx负责处理https请求.

使用autocert签名时 需要指定域名, 这个域名需要指向nginx主机ip

在nginx配置文件也需要在监听 443 ssl的地方 加上这个域名

server {
   listen 443 ssl;
   server_name yyy.xxx.com yyy2.xxx.com;
}

这样在使用autocert生成SSL证书时, 会自动找到当前nginx配置文件的这个地方, 会自动加上ssl_certificate与ssl_certificate_key

server {
        listen 443 ssl;
        server_name yyy.xxx.com yyy2.xxx.com  ;
        ssl on;
        ssl_certificate /etc/letsencrypt/live/yyy.xxx.com/fullchain.pem; # managed by Certbot
        ssl_certificate_key /etc/letsencrypt/live/yyy.xxx.com/privkey.pem; # managed by Certbot
        include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
        ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}