56 lines
1.5 KiB
Bash
56 lines
1.5 KiB
Bash
#!/usr/bin/env bash
|
|
# 为杜康 runxian.top 五域名申请 Let's Encrypt 并切换 HTTPS 配置
|
|
set -euo pipefail
|
|
|
|
SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
|
|
DOMAINS=(
|
|
user.runxian.top
|
|
shop.runxian.top
|
|
partner.runxian.top
|
|
webadmin.runxian.top
|
|
dkapi.runxian.top
|
|
)
|
|
|
|
echo "==> 检查 DNS 解析到本机..."
|
|
for d in "${DOMAINS[@]}"; do
|
|
ip="$(dig +short "$d" @223.5.5.5 | tail -1)"
|
|
if [[ -z "$ip" ]]; then
|
|
echo "ERROR: $d 无 A 记录，请先在 DNS 添加指向本机公网 IP"
|
|
exit 1
|
|
fi
|
|
echo " $d -> $ip"
|
|
done
|
|
|
|
mkdir -p /var/www/certbot /var/log/nginx/dukang
|
|
|
|
echo "==> 申请证书..."
|
|
certbot certonly --webroot -w /var/www/certbot \
|
|
--cert-name user.runxian.top \
|
|
-d user.runxian.top \
|
|
-d shop.runxian.top \
|
|
-d partner.runxian.top \
|
|
-d webadmin.runxian.top \
|
|
-d dkapi.runxian.top \
|
|
--non-interactive --agree-tos -m admin@runxian.top || {
|
|
echo "certbot 失败，请确认 DNS 已生效且 80 端口可从公网访问"
|
|
exit 1
|
|
}
|
|
|
|
echo "==> 切换 nginx HTTPS 配置..."
|
|
install -m 644 "$SCRIPT_DIR/nginx-runxian-dukang-ssl.conf" /etc/nginx/conf.d/dukang-runxian.conf
|
|
nginx -t
|
|
systemctl reload nginx
|
|
|
|
echo "==> 验证..."
|
|
for url in \
|
|
https://user.runxian.top/ \
|
|
https://shop.runxian.top/ \
|
|
https://partner.runxian.top/ \
|
|
https://webadmin.runxian.top/ \
|
|
https://dkapi.runxian.top/api/v1/health; do
|
|
code="$(curl -sf -o /dev/null -w '%{http_code}' "$url" || echo fail)"
|
|
echo " $url -> $code"
|
|
done
|
|
|
|
echo "==> runxian.top 杜康域名 HTTPS 已启用"
|