domain 무료 인증서 발행 방법
chmod -R 775 /home/www/letsencrypt && chmod -R 770 /etc/letsencrypt && chown -R www-data:www-data /home/www/ /etc/letsencrypt
su – acmeuser
acme.sh –issue -d ycis.co.kr –server letsencrypt –keylength 4096 -w /home/www/letsencrypt –key-file /etc/letsencrypt/rsa-certs/privkey.pem –ca-file /etc/letsencrypt/rsa-certs/chain.pem –cert-file /etc/letsencrypt/rsa-certs/cert.pem –fullchain-file /etc/letsencrypt/rsa-certs/fullchain.pem –reloadcmd “sudo /bin/systemctl reload nginx.service”
acme.sh –issue -d ycis.co.kr –server letsencrypt –keylength ec-384 -w /home/www/letsencrypt –key-file /etc/letsencrypt/ecc-certs/privkey.pem –ca-file /etc/letsencrypt/ecc-certs/chain.pem –cert-file /etc/letsencrypt/ecc-certs/cert.pem –fullchain-file /etc/letsencrypt/ecc-certs/fullchain.pem –reloadcmd “sudo /bin/systemctl reload nginx.service”
$sudo apt-get update
$sudo apt-get install software-properties-common
$sudo add-apt-repository universe
$sudo add-apt-repository ppa:certbot/certbot
$sudo apt-get update
sudo apt-get install certbot python-certbot-nginx
server {
listen 443 ssl default_server;
listen [::]:443 ssl default_server;
server_name ycis.co.kr
location / {
root /home/www;
autoindex on;
autoindex_exact_size off;
}
sudo certbot –nginx
0 12 */80 * * sudo certbot renew –dry-run >> /home/tw_soul/DODO/crontab_log 2>&1