Pehea e hiki ai i nā palapala hōʻoia SSL (me ka HTTPS redirection & HSTS) no nā subdomains HestiaCP i nā pūʻulu?

Ua hālāwai paha ʻoe me kēia kūlana? Ua hoʻonohonoho pono ʻoe i kahi kikowaena HestiaCP a hana i nā subdomains āpau, a laila ʻike ʻoe he pono ʻoe e noi lima a hoʻonohonoho i nā palapala hōʻoia SSL pākahi? 🤯 He nui loa kēlā o ka hoʻoluhi!

Mai hopohopo, i kēia lā e aʻo aku wau iā ʻoe i kahi hana hoʻopunipuni e hiki ai i nā palapala hōʻoia SSL ma ka nui me hoʻokahi kaomi . ʻAʻole ia e komo pū me nā palapala hōʻoia Let's Encrypt wale nō , akā hiki pū kekahi ke hoʻololi pololei iā HTTPS a me HSTS (HTTP Strict Transport Security).

🔥 No ke aha e hiki ai iā SSL i ka nui?

Manaʻo paha ʻoe, "ʻAʻole anei hiki iaʻu ke kaomi lima iā lākou pākahi?" ʻOiaʻiʻo hiki iā ʻoe, akā inā he mau ʻumi a he mau haneli paha o nā subdomains āu , ʻo ka hana lima ʻana he mea ia e like me ka hoʻomāinoino iā ʻoe iho!

Loaʻa nā pōmaikaʻi o ka hoʻoili ʻana i ka Batch:
✔ E mālama i ka manawa: Hoʻokahi kaomi hoʻokō, ʻaʻole pono e kaomi lima.
✔ E pale i nā haʻalele: E hōʻemi i nā hewa kanaka a e hōʻoia i ka paʻa o nā subdomain a pau.
✔ Hoʻokō i ka HTTPS: Hoʻihoʻi 'akomi iā HTTP -> HTTPS, hoʻomaikaʻi SEO helu helu.
✔ ʻO ka paʻakikī palekana HSTS: Kāohi i ka hoʻouka kanaka-i-ka-waena a hoʻopaʻa i ka pūnaewele.

💡 Nā ʻanuʻu hana kikoʻī

ʻO ka mea aʻe, e hoʻohana mākou i ka hāmeʻa laina kauoha e hele mai me HestiaCP e kākau i kahi script shell maʻalahi e lawelawe maʻalahi i ka hoʻonohonoho SSL no nā subdomains āpau.

📝 KaʻAnuʻu 1: E kiʻi i kahi papa inoa o nā subdomains

E noʻonoʻo i kāu kikowaena mua chenweiliang.com, ua hoʻohui ʻoe i nā subdomain he nui, no ka laʻana:

• en.chenweiliang.com
• ru.chenweiliang.com
• la.chenweiliang.com
• lv.chenweiliang.com

I ka palapala, pono mākou e mālama i kahi papa inoa o nā prefix subdomain, no ka laʻana:

SUBDOMAINS="en ru la lv"

Ma hope e hoʻopili mākou i kēia mau subdomains a noi aku i nā palapala SSL i kēlā me kēia.

📜 KaʻAnuʻu 2: Kākau i kahi palapala e hiki ai i nā palapala hōʻoia SSL ma nā pūʻulu

Hāʻawi ʻo HestiaCP i kahi mea hana laina kauoha , e hiki ai iā mākou ke hana i nā hana e pili ana iā SSL me ka hoʻohana ʻana i nā kauoha ʻekolu:

• v-add-letsencrypt-domain → E noi no ka palapala SSL
• v-add-web-domain-ssl-force → Hoʻoikaika i ka HTTPS
• v-add-web-domain-ssl-hsts → Hoʻā i ka HSTS

ʻO ke ʻano holoʻokoʻa penei (kope a hoʻokō pololei) :

#!/bin/bash

# HestiaCP 用户名
USER="youruser"
# 你的主域名
DOMAIN="chenweiliang.com"
# 需要启用 SSL 的子域名前缀
SUBDOMAINS="en ru la lv"
# 遍历每个子域名，依次开启 SSL
for SUB in $SUBDOMAINS
do
    FULL_DOMAIN="$SUB.$DOMAIN"
    echo "🚀 在启用 $FULL_DOMAIN 的 SSL 配置..."

    # 申请 Let's Encrypt 证书
    v-add-letsencrypt-domain $USER $FULL_DOMAIN
    if [ $? -ne 0 ]; then
        echo "❌ 错误：获取 $FULL_DOMAIN SSL 证书失败（可能触发 Let's Encrypt 429 限流），请稍后重试。"
        continue
    fi

    # 强制 HTTPS 重定向
    v-add-web-domain-ssl-force $USER $FULL_DOMAIN

    # 启用 HSTS（HTTP 严格传输安全）
    v-add-web-domain-ssl-hsts $USER $FULL_DOMAIN

    echo "✅ $FULL_DOMAIN SSL 配置完成！"
done
echo "🎉 所有子域名 SSL 配置操作结束！"

🚀 KaʻAnuʻu 3: E hoʻokō i ka palapala

I kēia manawa ua kākau ʻia ka palapala, e holo kāua!

1️⃣ E mālama i ka palapala e like me enable_ssl.sh
2️⃣ Hāʻawi i nā ʻae hoʻokō:

chmod +x enable_ssl.sh

3️⃣ E holo i ka palapala :

./enable_ssl.sh

A laila hiki iā ʻoe ke ʻike e hoʻopili ʻia ana nā palapala hōʻoia SSL no nā subdomains āpau a hoʻāla ʻia!

⚠ Nā memo

💡 E pili ana iā Let's Encrypt i ka palena o kēia manawa (429 hewa)
E hoʻopunipuni E kaupalena i ka helu o nā noi palapala no ka IP i loko o hoʻokahi holaInā hoʻonohonoho ʻoe i nā subdomain he nui i ka manawa hoʻokahi, hiki iā ʻoe ke hālāwai 429 Hapa.

✅ Kaomi i ka loulou ma lalo e nānā i ka hoʻonā ▼

🔗Hāhewa: E hoʻopili kākou i ke kūlana hōʻoia hou 429 ka palena helu, he aha kaʻu e hana ai? Ua wehewehe ʻia ka manawa hoʻihoʻi a me nā hoʻonā!

• E noi i nā pūʻulu, e holo wale ana i kekahi mau subdomains i ka manawa.
• Ke hoʻohana nei i kahi hopena ACME ʻokoʻa(ʻo kahi laʻana Cloudflare (Noi palapala hōʻoia API).
• E kali i 1 hola a ho'āʻo hou.

💡 E nānā inā ua hoʻokomo pololei ʻo HestiaCP i ka palapala SSL
Inā ʻike ʻoe Ua hāʻule ka hoʻonohonoho SSL, hiki iā ʻoe ke nānā iā ia me ka lima:

v-list-web-domain $USER yoursubdomain.chenweiliang.com

E koho pono SSL ʻO ke kahua yesInā ʻaʻole, pono ʻoe e hana me ka lima.

🎯 Ka hopena

ʻAʻole paʻakikī ka hoʻā ʻana i nā palapala hōʻoia SSL ma ka nui; ʻo ke kī ka hoʻohana ʻana i ke ʻano kūpono. Me nā mea hana laina kauoha HestiaCP a me nā palapala shell , hiki iā ʻoe ke hoʻonohonoho i ka HTTPS no nā subdomains āpau me hoʻokahi kaomi , e hoʻokō ana i ka pono a me ka palekana.

💡ʻAʻole wale kēia e mālama iā ʻoe i ka manawa he nui, akā e hoʻomaikaʻi pū i kāu helu SEO a me ka palekana pūnaewele , no laila no ke aha ʻaʻole?

E hoʻāʻo iā ia i kēia manawa a hoʻohui i ka pale HTTPS i kāu mau subdomains i mea e palekana ai lākou a ʻoihana! 🚀