ShellScript
# 1. 迁移目录
vhost_domain="xxx.com"
mv /home/wwwroot/default/wwwroot/${vhost_domain}/ /home/wwwroot/
ls /home/wwwroot/${vhost_domain}/
chown -R www:www /home/wwwroot/${vhost_domain}/
cat /home/wwwroot/${vhost_domain}/wp-config.php
# 2. 去phpmyadmin建立用户,然后导出、导入数据库
xxx.com
PuF])v/Uo4z9hXs
# 3. 重建网站
sed -e "s/VHOST_DOMAIN/${vhost_domain}/g" -e "s/VHOST_SUB_DOMAIN/www.${vhost_domain}/g" /root/lnmp/vhost.conf > /etc/nginx/vhost/${vhost_domain}.conf
# 4.颁发zero证书
nginx -t
systemctl restart nginx && systemctl status nginx
acme.sh --issue -d ${vhost_domain} -d www.${vhost_domain} \
--nginx /etc/nginx/vhost/${vhost_domain}.conf
# 4.颁发letsencrypt证书
# 4.1 失败删除
acme.sh --remove -d ${vhost_domain} --ecc
systemctl restart nginx && systemctl status nginx
acme.sh --issue -d ${vhost_domain} -d www.${vhost_domain} \
-w /home/wwwroot/${vhost_domain} \
--server letsencrypt --force
# 5.安装证书到nginx目录
mkdir -p /etc/nginx/ssl/${vhost_domain}
acme.sh --install-cert -d ${vhost_domain} -d www.${vhost_domain} \
--key-file /etc/nginx/ssl/${vhost_domain}/key.key \
--fullchain-file /etc/nginx/ssl/${vhost_domain}/fullchain.cer \
--ca-file /etc/nginx/ssl/${vhost_domain}/chain.pem \
--reloadcmd "systemctl reload nginx"
# 5.1修改nginx vhost 文件加入ssl
sed -e "s/VHOST_DOMAIN/${vhost_domain}/g" -e "s/VHOST_SUB_DOMAIN/www.${vhost_domain}/g" /root/lnmp/vhost_ssl_1024.conf >> /etc/nginx/vhost/${vhost_domain}.conf
sed -i "s/none.conf/wordpress.conf/g" /etc/nginx/vhost/${vhost_domain}.conf
# 5.2 注释掉ssl_stapling (letsencrypt)
sed -i 's/ssl_stapling on;/#ssl_stapling on;/' /etc/nginx/vhost/${vhost_domain}.conf
sed -i 's/ssl_stapling_verify on;/#ssl_stapling_verify on;/' /etc/nginx/vhost/${vhost_domain}.conf
# 6.修改权限
chattr -i /home/wwwroot/${vhost_domain}/.user.ini
chown -R www:www /home/wwwroot/${vhost_domain}/
chattr +i /home/wwwroot/${vhost_domain}/.user.ini
# 7. 重启 nginx
nginx -t
systemctl restart nginx && systemctl status nginx
########## ########## 单域名########## ##########
vhost_domain="xxx.xxx.com"
mv /home/wwwroot/default/wwwroot/${vhost_domain}/ /home/wwwroot/
ls /home/wwwroot/${vhost_domain}/
sed -e "s/VHOST_DOMAIN/${vhost_domain}/g" -e "s/VHOST_SUB_DOMAIN//g" /root/lnmp/vhost.conf > /etc/nginx/vhost/${vhost_domain}.conf
acme.sh --issue -d ${vhost_domain} \
-w /home/wwwroot/${vhost_domain} \
--server letsencrypt --force
mkdir -p /etc/nginx/ssl/${vhost_domain}
acme.sh --install-cert -d ${vhost_domain} \
--key-file /etc/nginx/ssl/${vhost_domain}/key.key \
--fullchain-file /etc/nginx/ssl/${vhost_domain}/fullchain.cer \
--ca-file /etc/nginx/ssl/${vhost_domain}/chain.pem \
--reloadcmd "systemctl reload nginx"
sed -e "s/VHOST_DOMAIN/${vhost_domain}/g" -e "s/VHOST_SUB_DOMAIN//g" /root/lnmp/vhost_ssl_1024.conf >> /etc/nginx/vhost/${vhost_domain}.conf