为e2c.net加上https访问

e2c博客刚架上，准备把SSL加上去，这样https就能在浏览器里看到小锁了，美滋滋啊。

1.获取certbot-auto

    wget https://dl.eff.org/certbot-auto
    chmod a+x certbot-auto

2.开始申请证书

    ./certbot-auto --server https://acme-v02.api.letsencrypt.org/directory -d '*.e2c.net' -d 'e2c.net' --manual --preferred-challenges dns-01 certonly

注：请根据需要修改域名

3.按照提示向DNS解释记录添加TXT记录

4.nginx中添加相应设置

    server {
                server_name www.e2c.net e2c.net;
                listen 443 http2 ssl;
                ssl on;
                root /home/www/blog/;
                index index.html index.htm index.php;
                ssl_certificate /etc/letsencrypt/live/e2c.net/fullchain.pem;
                ssl_certificate_key /etc/letsencrypt/live/e2c.net/privkey.pem;
                if (!-e $request_filename) {
                        rewrite ^(.*)$ /index.php$1 last;
                }
                location ~ .*\.php(\/.*)*$ {
                        include fastcgi.conf;
                        fastcgi_pass 127.0.0.1:9000;
                }
        }

Let’s Encrypt提供了3类验证（Challenge）方式，用于颁发证书：