https://blog.coderkang.top/tags/%E8%87%AA%E5%8A%A8%E5%8C%96%E9%85%8D%E7%BD%AE/ Recent content in 自动化配置 on Kang's Blog Hugo -- gohugo.io zh Mon, 18 Sep 2023 00:00:00 +0000 https://blog.coderkang.top/p/acme_dnspod_ssl_certificate_guide/ Mon, 18 Sep 2023 00:00:00 +0000 https://blog.coderkang.top/p/acme_dnspod_ssl_certificate_guide/ <img src="https://blog.coderkang.top/" alt="Featured image of post 使用 ACME 在 DNSPod 上自动配置 SSL 证书指南" /><h2 id="docker-部署-acmesh">Docker 部署 acme.sh </h2><p>docker-compose.yml，将 DNSPod API ID 和 Key 替换为实际值。</p> <div class="highlight"><div class="chroma"> <table class="lntable"><tr><td class="lntd"> <pre tabindex="0" class="chroma"><code><span class="lnt"> 1 </span><span class="lnt"> 2 </span><span class="lnt"> 3 </span><span class="lnt"> 4 </span><span class="lnt"> 5 </span><span class="lnt"> 6 </span><span class="lnt"> 7 </span><span class="lnt"> 8 </span><span class="lnt"> 9 </span><span class="lnt">10 </span><span class="lnt">11 </span><span class="lnt">12 </span></code></pre></td> <td class="lntd"> <pre tabindex="0" class="chroma"><code class="language-yaml" data-lang="yaml"><span class="line"><span class="cl"><span class="nt">services</span><span class="p">:</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="nt">acme-sh</span><span class="p">:</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="nt">image</span><span class="p">:</span><span class="w"> </span><span class="l">neilpang/acme.sh:latest</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="nt">container_name</span><span class="p">:</span><span class="w"> </span><span class="l">acme</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="nt">restart</span><span class="p">:</span><span class="w"> </span><span class="l">always</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="nt">command</span><span class="p">:</span><span class="w"> </span><span class="l">daemon</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="nt">environment</span><span class="p">:</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span>- <span class="l">TZ=Asia/Shanghai</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span>- <span class="l">DP_Id=****** </span><span class="w"> </span><span class="c"># DNSPod API ID</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span>- <span class="l">DP_Key=****************</span><span class="w"> </span><span class="c"># DNSPod API Key</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span><span class="nt">volumes</span><span class="p">:</span><span class="w"> </span></span></span><span class="line"><span class="cl"><span class="w"> </span>- <span class="l">./certs/:/acme.sh/</span><span class="w"> </span></span></span></code></pre></td></tr></table> </div> </div><h2 id="配置-acmesh">配置 acme.sh </h2><div class="highlight"><div class="chroma"> <table class="lntable"><tr><td class="lntd"> <pre tabindex="0" class="chroma"><code><span class="lnt">1 </span><span class="lnt">2 </span><span class="lnt">3 </span><span class="lnt">4 </span><span class="lnt">5 </span><span class="lnt">6 </span></code></pre></td> <td class="lntd"> <pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"><span class="line"><span class="cl"><span class="c1"># 启动 acme.sh</span> </span></span><span class="line"><span class="cl">docker compose up -d </span></span><span class="line"><span class="cl"><span class="c1"># 进入 acme.sh 容器</span> </span></span><span class="line"><span class="cl">docker compose <span class="nb">exec</span> -it acme sh </span></span><span class="line"><span class="cl"><span class="c1"># 设置默认 CA</span> </span></span><span class="line"><span class="cl">acme.sh --set-default-ca --server letsencrypt </span></span></code></pre></td></tr></table> </div> </div><h2 id="申请证书">申请证书 </h2><p>生成证书，将 <code>www.example.com</code> 替换为实际域名。证书会挂载到 <code>./certs/</code> 目录下。</p> <div class="highlight"><div class="chroma"> <table class="lntable"><tr><td class="lntd"> <pre tabindex="0" class="chroma"><code><span class="lnt">1 </span></code></pre></td> <td class="lntd"> <pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"><span class="line"><span class="cl">acme.sh --issue --dns dns_dp -d www.example.com </span></span></code></pre></td></tr></table> </div> </div>