CentOS 8 [Jonathan's Wiki 筆記]

本頁是唯讀的，您可以看到原始碼，但不能更動它。您如果覺得它不應被鎖上，請詢問管理員。
==== CentOS 8 ====
  * 安裝 DNS CloudFlare Plugin<cli>
dnf install python3-certbot-dns-cloudflare
</cli>
  * 建立 /root/lets-encrypt/cloudflare.ini <cli>
mkdir -p /root/lets-encrypt/
vi /root/lets-encrypt/cloudflare.ini
</cli>Exp:<file>
# Cloudflare API credentials used by Certbot
dns_cloudflare_email = cloudflare@example.com
dns_cloudflare_api_key = 0123456789abcdef0123456789abcdef01234567
</file>
  * 設定保護權限 <cli>
chmod 600 /root/lets-encrypt/cloudflare.ini
</cli>
  * 進行申請新憑證 Exp. example.com <code sh>
/usr/bin/certbot certonly \
  --dns-cloudflare \
  --dns-cloudflare-credentials /root/lets-encrypt/cloudflare.ini \
  --dns-cloudflare-propagation-seconds 10 \
  -d example.com
</code>
  * 進行定期更新憑證 Exp. example.com <cli>
/usr/bin/certbot renew \
  --dns-cloudflare \
  --dns-cloudflare-credentials /root/lets-encrypt/cloudflare.ini \
  --dns-cloudflare-propagation-seconds 10
</cli>
  * 設定每天自動檢查更新 
    - 建立 /root/lets-encrypt/renewcert.sh <cli>
vi /root/lets-encrypt/renewcert.sh</cli><file>
/usr/bin/certbot renew \
  --dns-cloudflare \
  --dns-cloudflare-credentials /root/lets-encrypt/cloudflare.ini \
  --dns-cloudflare-propagation-seconds 10
</file><cli>
chmod a+x /root/lets-encrypt/renewcert.sh
</cli>
    - 設定 /etc/crontab<cli>
vi /etc/crontab</cli><file>
:
# let's encrypt
35 2 * * * root /root/lets-encrypt/renewcert.sh > /tmp/renewcert.log
</file><cli>
systemctl restart crond
</cli>