1
2
3
4
5
6
7

curl  https://get.acme.sh | sh
cd 
acme.sh --register-account -m xxx@xx.com
./acme.sh --dns --issue -d syhu.com.cn --yes-I-know-dns-manual-mode-enough-go-ahead-please
# 添加完dns的txt解析后,提示用renew重新执行
./acme.sh --dns --renew -d syhu.com.cn --yes-I-know-dns-manual-mode-enough-go-ahead-please
# 提示证书文件位置

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38

# Load modular configuration files from the /etc/nginx/conf.d directory.
# See http://nginx.org/en/docs/ngx_core_module.html#include
# for more information.
# include /etc/nginx/conf.d/*.conf;

server {
	server_name x6.a.com x.a.com;
	
	# SSL configuration
	listen 443 ssl;
	listen [::]:443 ssl;
    
    # cer / crt证书文件 证书文件 key的路径
    ssl_certificate /path/syhu.com.cn.cer;
    ssl_certificate_key /path/syhu.com.cn.key;
    
    ssl_session_timeout 5m;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
    ssl_prefer_server_ciphers on;
	
	# Load configuration files for the default server block.
	# include /etc/nginx/default.d/*.conf;
	
	location / {
		proxy_pass http://alist;
		#proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
		proxy_set_header X-Forwarded-Proto $scheme;
		proxy_set_header Host $http_host;
		proxy_set_header X-Real-IP $remote_addr;
		proxy_set_header Range $http_range;
		proxy_set_header If-Range $http_if_range;
		proxy_redirect off;
		
		#the max size of file to upload
		client_max_body_size 20000m;
	}
}