llyang 大佬有话说 :
letsencrypt renew 的疑惑, 求解
源码如下，用dry-run调试半天发现：删除80端口server_name就可以，否则一直报错
基本环境: centos 8, nginx 1.14.1
server {
listen 80;
# server_name www.abc.com abc.com;
return 301 https://$host$request_uri;
}
server {
listen 443 ssl http2;
server_name www.abc.com;
ssl_certificate /var/lib/letsencrypt/live/abc.com/fullchain.pem;
ssl_certificate_key /var/lib/letsencrypt/live/abc.com/privkey.pem;
ssl_trusted_certificate /var/lib/letsencrypt/live/abc.com/chain.pem;
return 301 https://abc.com$request_uri;
}
server {
listen 443 ssl http2;
server_name abc.com;
ssl_certificate /var/lib/letsencrypt/live/abc.com/fullchain.pem;
ssl_certificate_key /var/lib/letsencrypt/live/abc.com/privkey.pem;
ssl_trusted_certificate /var/lib/letsencrypt/live/abc.com/chain.pem;
}