網站由http切換到https

參考教程

https://www.dexcoder.com/selfly/article/4949;jsessionid=484F40F28718AE7BC9B5F0988AACD0CE

https://imququ.com/post/letsencrypt-certificate.html

自帶備注

openssl req -new -sha256 -key domain.key -subj "/" -reqexts SAN -config <(cat /etc/pki/tls/openssl.cnf <(printf "[SAN]\nsubjectAltName=DNS:flyonline.top,DNS:www.flyonline.top")) > domain.csr

server

{

    listen       80;

    server_name  www.flyonline.top;

    location ^~ /.well-known/acme-challenge/ {

            alias /home/ec2-user/ssl/challenges/;

    }

    location / {

            return 301 https://$server_name$request_uri;

}

    listen       443;

ssl on;

    ssl_certificate /home/ec2-user/ssl/chained.pem;

    ssl_certificate_key /home/ec2-user/ssl/domain.key;

python acme_tiny.py --account-key ./account.key --csr ./domain.csr --acme-dir /home/ec2-user/ssl/challenges/ > ./signed.crt