modified: serv_nginx/.env
modified: serv_nginx/certbot/scripts/init-certbot.sh new file: serv_nginx/certbot/scripts/renewBegushiyBAshkirLatin.sh modified: serv_nginx/nginx/nginx-ssl.conf modified: serv_nginx/nginx/switch-config.sh begushiybashkir.ru add to nginx and certbot for getting certs and working with begushiybashkir.ru site too
This commit is contained in:
@@ -5,4 +5,5 @@ DOMAINS_yalarba=yalarba.ru,www.yalarba.ru
|
|||||||
DOMAINS_valitovgaziz=valitovgaziz.ru,www.valitovgaziz.ru
|
DOMAINS_valitovgaziz=valitovgaziz.ru,www.valitovgaziz.ru
|
||||||
DOMAINS_easysite102=easysite102.ru,www.easysite102.ru
|
DOMAINS_easysite102=easysite102.ru,www.easysite102.ru
|
||||||
DOMAINS_begushiybashkir=xn--80abahjtcfl5d0a8di.xn--p1ai,www.xn--80abahjtcfl5d0a8di.xn--p1ai
|
DOMAINS_begushiybashkir=xn--80abahjtcfl5d0a8di.xn--p1ai,www.xn--80abahjtcfl5d0a8di.xn--p1ai
|
||||||
|
DOAMINS_DOMAINS_begushiybashkir_latin=begushiybashkir.ru,www.begushiybashkir.ru
|
||||||
ALL_DOMAINS=yalarba.ru,www.yalarba.ru,valitovgaziz.ru,www.valitovgaziz.ru,easysite102.ru,www.easysite102.ru
|
ALL_DOMAINS=yalarba.ru,www.yalarba.ru,valitovgaziz.ru,www.valitovgaziz.ru,easysite102.ru,www.easysite102.ru
|
||||||
@@ -33,7 +33,7 @@ fi
|
|||||||
|
|
||||||
echo "sertificates for ${DOMAINS_easysite102} is ready"
|
echo "sertificates for ${DOMAINS_easysite102} is ready"
|
||||||
|
|
||||||
# Проверяем наличие сертификатов для easysite102.ru
|
# Проверяем наличие сертификатов для бегущийбашкир.рф
|
||||||
if [ ! -d "/etc/letsencrypt/live/xn--80abahjtcfl5d0a8di.xn--p1ai" ]; then
|
if [ ! -d "/etc/letsencrypt/live/xn--80abahjtcfl5d0a8di.xn--p1ai" ]; then
|
||||||
echo "Получаем новые сертификаты ${DOMAINS_begushiybashkir} ..."
|
echo "Получаем новые сертификаты ${DOMAINS_begushiybashkir} ..."
|
||||||
certbot certonly --webroot \
|
certbot certonly --webroot \
|
||||||
@@ -44,6 +44,17 @@ fi
|
|||||||
|
|
||||||
echo "sertificates for ${DOMAINS_begushiybashkir} is ready"
|
echo "sertificates for ${DOMAINS_begushiybashkir} is ready"
|
||||||
|
|
||||||
|
# Проверяем наличие сертификатов для begushiybashkir.ru
|
||||||
|
if [ ! -d "/etc/letsencrypt/live/begushiybashkir.ru" ]; then
|
||||||
|
echo "Получаем новые сертификаты ${DOMAINS_begushiybashkir_latin} ..."
|
||||||
|
certbot certonly --webroot \
|
||||||
|
--config /etc/letsencrypt/config/certbot.ini \
|
||||||
|
-w /var/www/certbot \
|
||||||
|
-d ${DOMAINS_begushiybashkir_latin}
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo "sertificates for ${DOMAINS_begushiybashkir_latin} is ready"
|
||||||
|
|
||||||
set -e # Завершаем работу, если любая команда вернёт ошибку
|
set -e # Завершаем работу, если любая команда вернёт ошибку
|
||||||
|
|
||||||
# Активируем сервис cron
|
# Активируем сервис cron
|
||||||
|
|||||||
@@ -0,0 +1,7 @@
|
|||||||
|
#!/bin/sh
|
||||||
|
|
||||||
|
echo "Получаем новые сертификаты для ${DOMAINS_begushiybashkir_latin}..."
|
||||||
|
certbot certonly --webroot \
|
||||||
|
--config /etc/letsencrypt/config/certbot.ini \
|
||||||
|
-w /var/www/certbot \
|
||||||
|
-d ${DOMAINS_begushiybashkir_latin}
|
||||||
@@ -100,3 +100,22 @@ server {
|
|||||||
try_files $uri $uri/ /index.html;
|
try_files $uri $uri/ /index.html;
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
listen 443 ssl;
|
||||||
|
server_name begushiybashkir.ru www.begushiybashkir.ru;
|
||||||
|
|
||||||
|
ssl_certificate /etc/letsencrypt/live/begushiybashkir.ru/fullchain.pem;
|
||||||
|
ssl_certificate_key /etc/letsencrypt/live/begushiybashkir.ru/privkey.pem;
|
||||||
|
|
||||||
|
# Те же SSL настройки
|
||||||
|
ssl_protocols TLSv1.2 TLSv1.3;
|
||||||
|
ssl_prefer_server_ciphers on;
|
||||||
|
ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";
|
||||||
|
|
||||||
|
location / {
|
||||||
|
root /usr/share/nginx/begushiybashkir/html;
|
||||||
|
index index.html;
|
||||||
|
try_files $uri $uri/ /index.html;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|||||||
@@ -5,6 +5,7 @@ if \
|
|||||||
[ -f "/etc/letsencrypt/live/yalarba.ru/fullchain.pem" ] && \
|
[ -f "/etc/letsencrypt/live/yalarba.ru/fullchain.pem" ] && \
|
||||||
[ -f "/etc/letsencrypt/live/easysite102.ru/fullchain.pem" ] && \
|
[ -f "/etc/letsencrypt/live/easysite102.ru/fullchain.pem" ] && \
|
||||||
[ -f "/etc/letsencrypt/live/valitovgaziz.ru/fullchain.pem" ] && \
|
[ -f "/etc/letsencrypt/live/valitovgaziz.ru/fullchain.pem" ] && \
|
||||||
|
[ -f "/etc/letsencrypt/live/begushiybashkir.ru/fullchain.pem" ] && \
|
||||||
[ -f "/etc/letsencrypt/live/xn--80abahjtcfl5d0a8di.xn--p1ai/fullchain.pem" ]; then
|
[ -f "/etc/letsencrypt/live/xn--80abahjtcfl5d0a8di.xn--p1ai/fullchain.pem" ]; then
|
||||||
echo "SSL certificates found for all domains, switching to HTTPS configuration"
|
echo "SSL certificates found for all domains, switching to HTTPS configuration"
|
||||||
ln -sf /etc/nginx/nginx-ssl.conf /etc/nginx/conf.d/default.conf
|
ln -sf /etc/nginx/nginx-ssl.conf /etc/nginx/conf.d/default.conf
|
||||||
|
|||||||
Reference in New Issue
Block a user