安装 Nginx#

1
apt install nginx

配置证书#

1
# 1. 安装certbot
2
apt-get install certbot python3-certbot-nginx
3

4
# 2. 获取证书
5
# 自动配置, --nginx-server-root指定nginx配置文件目录
6
certbot --nginx --nginx-server-root /usr/local/nginx-1.23.3/conf
7
# 指定域名, example.com换成自己的域名
8
certbot --nginx -d example.com -d www.example.com
9

10

11
# 3. 自动续约
12
certbot renew --dry-run

执行完后 nginx.conf 会自动加上 SSL 相关配置

常见问题#

问题一、第 2 步获取证书报错:

1
Error while running nginx -c /usr/local/nginx-1.25.4/conf/nginx.conf -t.
2

3
nginx: the configuration file /usr/local/nginx-1.25.4/conf/nginx.conf syntax is ok
4
2024/03/11 10:42:44 [emerg] 1985275#1985275: open() "/usr/share/nginx/logs/xxx_admin.access.log" failed (2: No such file or directory)
5
nginx: configuration file /usr/local/nginx-1.25.4/conf/nginx.conf test failed

创建/usr/share/nginx/logs目录，重新执行第 2 步命令

问题二、执行certbot --nginx --nginx-server-root /usr/local/nginx-1.23.3/conf命令报错：

1
Saving debug log to /var/log/letsencrypt/letsencrypt.log
2
The nginx plugin is not working; there may be problems with your existing configuration.
3
The error was: NoInstallationError("Could not find a usable 'nginx' binary. Ensure nginx exists, the binary is executable, and your PATH is set correctly.",)

解决方案:

1
ln -s /usr/local/nginx-1.23.3/sbin/nginx /usr/bin/nginx
2
ln -s /usr/local/nginx-1.23.3/conf/ /etc/nginx