服务器迁移记录

# 初始化
vhost_domain="xxx.com"
mkdir -p /home/wwwroot/${vhost_domain}/
chown -R www:www /home/wwwroot/${vhost_domain}/
sed -e "s/VHOST_DOMAIN/${vhost_domain}/g" -e "s/VHOST_SUB_DOMAIN/www.${vhost_domain}/g" /root/lnmp/vhost.conf > /etc/nginx/vhost/${vhost_domain}.conf
nginx -t

# 重启
systemctl reload nginx && systemctl status nginx

# 申请证书
acme.sh --issue -d ${vhost_domain} -d www.${vhost_domain} \
  -w /home/wwwroot/${vhost_domain} \
  --server zerossl
  
# 5.安装证书到nginx目录
mkdir -p /etc/nginx/ssl/${vhost_domain}
acme.sh --install-cert -d ${vhost_domain} -d www.${vhost_domain} \
  --key-file /etc/nginx/ssl/${vhost_domain}/key.key \
  --fullchain-file /etc/nginx/ssl/${vhost_domain}/fullchain.cer \
  --ca-file /etc/nginx/ssl/${vhost_domain}/chain.pem \
  --reloadcmd "systemctl reload nginx"
  
# 手工修改vhost SSL配置
# ...

# 跨域和文件权限
echo "open_basedir=/home/wwwroot/${vhost_domain}:/tmp/:/proc/" > /home/wwwroot/${vhost_domain}/.user.ini
chown -R www:www /home/wwwroot/${vhost_domain}/
chattr +i /home/wwwroot/${vhost_domain}/.user.ini

# 重启
nginx -t
systemctl reload nginx && systemctl status nginx

# 初始化
vhost_domain="xxx.com"
mkdir -p /home/wwwroot/${vhost_domain}/
chown -R www:www /home/wwwroot/${vhost_domain}/
sed -e "s/VHOST_DOMAIN/${vhost_domain}/g" -e "s/VHOST_SUB_DOMAIN/www.${vhost_domain}/g" /root/lnmp/vhost.conf > /etc/nginx/vhost/${vhost_domain}.conf
nginx -t

# 重启
systemctl reload nginx && systemctl status nginx

# 申请证书
acme.sh --issue -d ${vhost_domain} -d www.${vhost_domain} \
  -w /home/wwwroot/${vhost_domain} \
  --server zerossl
  
# 5.安装证书到nginx目录
mkdir -p /etc/nginx/ssl/${vhost_domain}
acme.sh --install-cert -d ${vhost_domain} -d www.${vhost_domain} \
  --key-file /etc/nginx/ssl/${vhost_domain}/key.key \
  --fullchain-file /etc/nginx/ssl/${vhost_domain}/fullchain.cer \
  --ca-file /etc/nginx/ssl/${vhost_domain}/chain.pem \
  --reloadcmd "systemctl reload nginx"
  
# 手工修改vhost SSL配置
# ...

# 跨域和文件权限
echo "open_basedir=/home/wwwroot/${vhost_domain}:/tmp/:/proc/" > /home/wwwroot/${vhost_domain}/.user.ini
chown -R www:www /home/wwwroot/${vhost_domain}/
chattr +i /home/wwwroot/${vhost_domain}/.user.ini

# 重启
nginx -t
systemctl reload nginx && systemctl status nginx