证书自动续签方案

1
2
3
4

git clone --depth 1 https://gitee.com/neilpang/acme.sh.git
cd acme.sh
./acme.sh --install -m my@example.com
alias acme.sh=~/.acme.sh/acme.sh

1

./acme.sh --set-default-ca --server letsencrypt

1

acme.sh --issue -d example.com -w ./nginx/site/ 

1
2

export Ali_Key="<key>"
export Ali_Secret="<secret>"

1

acme.sh --issue -d example.com -d '*.example.com' --dns dns_ali

1
2
3
4
5
6
7

acme.sh --install-cert -d example.com \
--key-file       /path/to/keyfile/in/nginx/key.pem  \
--fullchain-file /path/to/fullchain/nginx/cert.pem \
--reloadcmd     "service nginx force-reload"


acme.sh --install-cert -d puff.golang.space --key-file       /home/apps/gb/nginx/certs/key.pem  --fullchain-file /home/apps/gb/nginx/certs/cert.pem --reloadcmd     "/home/apps/gb && docker compose exec -it nginx nginx -s reload"

1
2
3
4

# 升级并保持自动更新
acme.sh  --upgrade  --auto-upgrade
# 关闭自动更新
acme.sh --upgrade  --auto-upgrade  0