Yadda ake kunna takaddun shaida na SSL (gami da juyawa HTTPS & HSTS) don yanki na HestiaCP a cikin batches?

Shin ka taɓa fuskantar wannan yanayi? Ka kafa sabar HestiaCP cikin gaggawa kuma ka ƙirƙiri dukkan ƙananan yankuna, sai kawai ka ga dole ne ka nemi da kuma saita takaddun shaida na SSL da hannu ɗaya bayan ɗaya? 🤯 Wannan abin ya yi yawa!

Kada ku damu, a yau zan koya muku wata dabara don kunna takaddun shaida na SSL da yawa da dannawa ɗaya . Ba wai kawai ya haɗa da takaddun shaida na Bari Mu Encrypt ba , har ma yana ba da damar kai tsaye ga HTTPS ta atomatik da HSTS (Tsaron Tsaron Sufuri na HTTP).

🔥 Me yasa ba da damar SSL a girma?

Za ka iya tunanin, "Ba zan iya danna su da hannu ɗaya bayan ɗaya ba?" Tabbas za ka iya, amma idan kana da dozin ko ɗaruruwan ƙananan yankuna , yin hakan da hannu ba komai bane illa azabtar da kai!

sarrafa tsari yana da fa'idodi masu zuwa:
✔ Ajiye lokaci: Kisan dannawa ɗaya, babu buƙatar danna da hannu.
✔ Guji rashi: Rage kurakurai na ɗan adam kuma tabbatar da duk wuraren yanki suna da tsaro.
✔ Ƙaddamar da HTTPS: Miyar da HTTP ta atomatik -> HTTPS, inganta SEO Ci.
✔ HSTS tsaro hardening: Hana kai hare-hare tsakanin mutane da kuma sanya rukunin yanar gizon ya fi tsaro.

💡 takamaiman matakan aiki

Na gaba, za mu yi amfani da kayan aikin layin umarni wanda ke zuwa tare da HestiaCP don rubuta rubutun harsashi mai sauƙi don sarrafa tsarin SSL na duk ƙananan yankuna cikin sauƙi.

📝 Mataki na 1: Sami jerin yanki na yanki

A ɗauka babban yankinku shine chenweiliang.com, kun ƙara ƙananan yanki da yawa, misali:

• en.chenweiliang.com
• ru.chenweiliang.com
• la.chenweiliang.com
• lv.chenweiliang.com

A cikin rubutun, muna buƙatar kawai mu kula da jerin ƙa'idodin ƙa'idodin yanki, misali:

SUBDOMAINS="en ru la lv"

Daga baya za mu madauki ta waɗannan ƙananan yankuna kuma mu nemi takaddun shaida na SSL ɗaya bayan ɗaya.

📜 Mataki na 2: Rubuta rubutun don kunna takaddun shaida na SSL a cikin batches

HestiaCP yana ba da kayan aikin layin umarni , wanda ke ba mu damar yin ayyukan da suka shafi SSL ta amfani da waɗannan umarni uku:

• v-add-letsencrypt-domain → Nemi takardar shaidar SSL
• v-add-web-domain-ssl-force → Ƙaddamar da HTTPS
• v-add-web-domain-ssl-hsts → Kunna HSTS

Cikakken rubutun kamar haka (kwafi kuma aiwatar da shi kai tsaye) :

#!/bin/bash

# HestiaCP 用户名
USER="youruser"
# 你的主域名
DOMAIN="chenweiliang.com"
# 需要启用 SSL 的子域名前缀
SUBDOMAINS="en ru la lv"
# 遍历每个子域名，依次开启 SSL
for SUB in $SUBDOMAINS
do
    FULL_DOMAIN="$SUB.$DOMAIN"
    echo "🚀 在启用 $FULL_DOMAIN 的 SSL 配置..."

    # 申请 Let's Encrypt 证书
    v-add-letsencrypt-domain $USER $FULL_DOMAIN
    if [ $? -ne 0 ]; then
        echo "❌ 错误：获取 $FULL_DOMAIN SSL 证书失败（可能触发 Let's Encrypt 429 限流），请稍后重试。"
        continue
    fi

    # 强制 HTTPS 重定向
    v-add-web-domain-ssl-force $USER $FULL_DOMAIN

    # 启用 HSTS（HTTP 严格传输安全）
    v-add-web-domain-ssl-hsts $USER $FULL_DOMAIN

    echo "✅ $FULL_DOMAIN SSL 配置完成！"
done
echo "🎉 所有子域名 SSL 配置操作结束！"

🚀 Mataki na 3: Ci gaba da rubutun

Yanzu da aka rubuta rubutun, bari mu gudanar da shi!

1️⃣ Ajiye rubutun azaman enable_ssl.sh
2️⃣ Ba da izinin aiwatarwa:

chmod +x enable_ssl.sh

3️⃣ Gudanar da rubutun :

./enable_ssl.sh

Sannan za ku iya ganin cewa ana amfani da takaddun shaida na SSL na duk ƙananan yankuna ta atomatik don kuma ana kunna su!

⚠ Bayanan kula

💡 Game da Bari Mu Encrypt iyaka na yanzu (kuskure 429)
Bari mu Encrypt Iyakance adadin buƙatun takaddun shaida kowane IP a cikin sa'a ɗayaIdan kun saita ƙananan yanki da yawa a lokaci ɗaya, kuna iya cin karo 429 Kuskure.

✅ Danna wannan link dake kasa domin ganin maganin ▼

🔗Kuskure: Bari mu Encrypt sabon auth status 429 iyaka iyaka, menene zan yi? An bayyana lokacin dawowa da mafita!

• Aiwatar a batches, kawai yana gudanar da ƙananan yanki a lokaci guda.
• Yin amfani da madaidaicin ƙarshen ACME daban(Misali Cloudflare (Aikace-aikacen takardar shaidar API).
• Jira awa 1 kuma a sake gwadawa.

💡 Bincika idan HestiaCP ya shigar da takardar shaidar SSL daidai
Idan kun samu Tsarin SSL ya gaza, za ku iya duba shi da hannu:

v-list-web-domain $USER yoursubdomain.chenweiliang.com

Yi kallo SSL Shin filin yesIdan ba haka ba, kuna buƙatar kunna shi da hannu.

🎯 Kammalawa

Kunna takaddun shaida na SSL a cikin babban yawa ba abu ne mai wahala ba; mabuɗin shine amfani da hanyar da ta dace. Tare da kayan aikin layin umarni na HestiaCP da rubutun harsashi , zaku iya saita HTTPS don duk ƙananan yankuna da dannawa ɗaya , wanda ke cimma inganci da tsaro.

💡Wannan ba wai kawai zai cece ku lokaci mai tsawo ba, har ma zai inganta maki SEO da tsaron gidan yanar gizo , to me zai hana?

Gwada shi yanzu kuma ƙara kariyar HTTPS a cikin rukunin gidajen yanar gizon ku don sa su kasance masu aminci da ƙwararru! 🚀