查看“Certbot”的源代码

certbot 是个自动签发 HTTPS 证书的 bot
==安装==
<pre># pacman -S certbot
# pacman -S certbot-nginx</pre>
==使用==
先检查 nginx 有没有错误，没有报错才可以运行<pre>$ nginx -t</pre>没有报错则继续<pre>$ certbot -d DOMAIN1 -d DOMAIN2 -m YOUR_EMAIL --nginx certonly</pre>
==位置==
<pre>Certificate is saved at: /etc/letsencrypt/live/DOMAIN/fullchain.pem
Key is saved at:         /etc/letsencrypt/live/DOMAIN/privkey.pem</pre>
==自动更新==
<pre># vim /etc/systemd/system/letsencrypt.service</pre><pre>[Unit]
Description=Let's Encrypt renewal

[Service]
Type=oneshot
ExecStart=/usr/bin/certbot renew --quiet --agree-tos
ExecStartPost=/bin/systemctl reload nginx.service</pre><pre># vim /etc/systemd/system/letsencrypt.timer</pre><pre>[Unit]
Description=Monthly renewal of Let's Encrypt's certificates

[Timer]
OnCalendar=daily
Persistent=true

[Install]
WantedBy=timers.target</pre>开机自启<pre># systemctl enable letsencrypt.timer
# systemctl start letsencrypt.timer</pre>
[[分类:Server]]