acme

安装

项目地址：https://github.com/acmesh-official/acme.sh

# 复制下载好的acme.sh到容器
docker cp /home/hongqi/acme/acme.sh centos7-acme:/root/acme

# yum -y install vixie-cron
Loaded plugins: fastestmirror, refresh-packagekit, security
Existing lock /var/run/yum.pid: another copy is running as pid 25960.
Another app is currently holding the yum lock; waiting for it to exit...

配置

-e Tencent_SecretId='xxx'
-e Tencent_SecretKey='xxx'

-v /home/hongqi/app/nginx/ssl_from_acme:/acme.sh

使用现成镜像

# 第一步 
docker pull neilpang/acme.sh

# 创建ssl文件存放目录
cd /data && mkdir acmell
    
# 指定key启动镜像
docker run -it -d --name acme --restart=always --net host -v /home/hongqi/app/nginx/ssl_from_acme:/acme.sh -e DP_Id='xxx' -e DP_Key='xxx' -e Tencent_SecretId='' neilpang/acme.sh daemon

docker run -it -d --name acme --restart=always --net host -v /home/hongqi/app/nginx/ssl_from_acme:/acme.sh -e Tencent_SecretId='xxx' -e Tencent_SecretKey='xxx' neilpang/acme.sh daemon

开始启动服务

#需要注册邮箱
docker exec acme --register-account -m 373704015@qq.com

#开始签名证书
docker exec acme --issue --dns dns_tencent -d capsion.top -d *.capsion.top --keylength ec-256

export Tencent_SecretId="刚刚申请的ID"
export Tencent_SecretKey="刚刚申请的Key"
acme.sh --issue --dns dns_tencent -d example.com -d *.example.com --keylength ec-256

docker exec acme --issue --dns dns_tencent -d wxyibu.top -d *.wxyibu.top --keylength ec-256