Nginx’da Let’s Encrypt SSL sertifikatini qanday o‘rnatish?

NameOcean panelida bepul wildcard Let's Encrypt SSL sertifikatlarini avtomatik olishingiz mumkin. Certbot kabi buyruqlar bilan ovora bo'lmang. Faqat bir necha bosishda SSL olish bo'yicha qo'llanma: https://nameocean.net/article/how-create-free-ssl-nameocean/

Endi Nginx serveriga SSL o'rnatamiz.

1-qadam

NameOcean panelidan sertifikatni yuklab oling.

<img style="width: 698px;" src="https://minio.yuix.org/nameocean/django-summernote/2019-03-29/58de2ac6-609b-4369-9aad-68af6f7f7568.jpg">

2-qadam

Zip faylni oching, ichida shu fayllar bo'ladi.

<img style="width: 698px;" src="https://minio.yuix.org/nameocean/django-summernote/2019-03-29/c5c5c302-c1e6-4eed-a74a-f39db0dcd491.png">

3-qadam

Fayllarni serverga ko'chiring. FTP yoki SFTP orqali ham mumkin. Men scp ishlataman:

scp -r ~/Downloads/example.com 45.76.91.165:/root/

Bu example.com papkasini serverning /root/ joyiga ko'chiradi.

Yoki serverda to'g'ridan-to'g'ri yuklab oling. "Download Certificate" tugmasini o'ng tugma bilan bosing, URLni nusxalang (masalan: https://minio.yuix.org/nameocean/ua4d3b6338c0a90a64828df4e65ff551c/example.com.zip).

Serverda bajaring:

wget https://minio.yuix.org/nameocean/ua4d3b6338c0a90a64828df4e65ff551c/example.com.zip
unzip example.com.zip

Endi sertifikat fayllari serverda.

4-qadam

Nginx-ni sozlang:

server {
    listen 80;
    server_name example.com www.example.com;

    location / {
        access_log off;
        log_not_found off;
        return 301 https://$host$request_uri;
    }
}

server {
  listen 443 ssl;
  server_name example.com www.example.com;
  ssl_certificate /root/example.com/fullchain.pem;
  ssl_certificate_key /root/example.com/privkey.pem;

  root /path/to/mywebsite/
}

Birinchi blok HTTP so'rovlarini HTTPS ga yo'naltiradi.

Ikkinchi blok saytingizni HTTPS da ishga tushiradi. PHP yoki Python uchun qo'shimcha sozlamalar qo'shishingiz mumkin. Savollar bo'lsa, izohda yozing.

Nginx-ni qayta ishga tushiring:

service nginx reload