Yuav ua li cas thiaj pab tau SSL daim ntawv pov thawj (xws li HTTPS redirection & HSTS) rau HestiaCP subdomains hauv batch?

Koj puas tau ntsib tej xwm txheej zoo li no? Tsim kom muaj kev siv zog loj HestiaCP Cov neeg rau zaub mov thiab subdomains tau tsim, tab sis koj pom tias koj yuav tsum tau manually thov rau thiab teeb tsa SSL daim ntawv pov thawj ib los ntawm ib qho? 🤯 Qhov no tsim txom heev!

Tsis txhob txhawj, hnub no kuv yuav qhia koj ib txoj kev dag. Ib-nias batch activation ntawm SSL, suav nrog tsis tsuas yog Wb Encrypt Daim Ntawv Pov Thawj, thiab ncaj qha pab koj pab HTTPS tsis siv neeg redirection 和 HSTS (HTTP Strict Transport Security).

🔥 Vim li cas thiaj pab tau SSL hauv ntau?

Tej zaum koj yuav xav tias: "Kuv tsis tuaj yeem nias lawv manually?" Tau kawg, tab sis yog tias koj muaj Kaum los yog pua pua ntawm subdomains, phau ntawv ua haujlwm yog undoubtedly self-abuse!

Batch processing muaj cov txiaj ntsig hauv qab no:
✔ Txuag sij hawm: One-click execution, tsis tas yuav nyem manually.
✔ Tsis txhob tso tseg: Txo cov neeg ua yuam kev thiab xyuas kom txhua tus subdomains muaj kev nyab xeeb.
✔ Tswj HTTPS: Tsis siv neeg redirect HTTP -> HTTPS, txhim kho SEO qhab nias.
✔ HSTS kev ruaj ntseg hardening: Tiv thaiv txiv neej-hauv-tus-nruab nrab tawm tsam thiab ua kom lub xaib muaj kev nyab xeeb dua.

💡 Cov kauj ruam ua haujlwm tshwj xeeb

Tom ntej no, peb siv cov cuab yeej hais kom ua kab uas los nrog HestiaCP los sau qhov yooj yim Shell Script, ua tau yooj yim Tag nrho cov subdomains SSL configuration rau .

📝 Kauj Ruam 1: Tau txais ib daim ntawv teev npe ntawm subdomains

Xav tias koj lub hom phiaj tseem ceeb yog chenweiliang.com, koj tau ntxiv ntau subdomains, piv txwv li:

• en.chenweiliang.com
• ru.chenweiliang.com
• la.chenweiliang.com
• lv.chenweiliang.com

Hauv tsab ntawv, peb tsuas yog yuav tsum tuav cov npe ntawm subdomain prefixes, piv txwv li:

SUBDOMAINS="en ru la lv"

Tom qab ntawd peb yuav voj los ntawm cov subdomains thiab thov rau SSL daim ntawv pov thawj ib los ntawm ib qho.

📜 Kauj Ruam 2: Sau ib tsab ntawv los pab SSL daim ntawv pov thawj hauv batch

HestiaCP muab Cov cuab yeej hais kom ua kab, peb tuaj yeem ua tiav SSL cov haujlwm cuam tshuam nrog peb cov lus txib hauv qab no:

• v-add-letsencrypt-domain → Thov rau SSL daim ntawv pov thawj
• v-add-web-domain-ssl-force → Tswj HTTPS
• v-add-web-domain-ssl-hsts → Qhib HSTS

Cov ntawv ua tiav yog raws li hauv qab no (daim ntawv luam thiab ua ncaj qha):

#!/bin/bash

# HestiaCP 用户名
USER="youruser"
# 你的主域名
DOMAIN="chenweiliang.com"
# 需要启用 SSL 的子域名前缀
SUBDOMAINS="en ru la lv"
# 遍历每个子域名，依次开启 SSL
for SUB in $SUBDOMAINS
do
    FULL_DOMAIN="$SUB.$DOMAIN"
    echo "🚀 在启用 $FULL_DOMAIN 的 SSL 配置..."

    # 申请 Let's Encrypt 证书
    v-add-letsencrypt-domain $USER $FULL_DOMAIN
    if [ $? -ne 0 ]; then
        echo "❌ 错误：获取 $FULL_DOMAIN SSL 证书失败（可能触发 Let's Encrypt 429 限流），请稍后重试。"
        continue
    fi

    # 强制 HTTPS 重定向
    v-add-web-domain-ssl-force $USER $FULL_DOMAIN

    # 启用 HSTS（HTTP 严格传输安全）
    v-add-web-domain-ssl-hsts $USER $FULL_DOMAIN

    echo "✅ $FULL_DOMAIN SSL 配置完成！"
done
echo "🎉 所有子域名 SSL 配置操作结束！"

🚀 Kauj Ruam 3: Ua cov ntawv sau

Tam sim no hais tias tsab ntawv tau sau, cia peb khiav nws!

1️⃣ Txuag tsab ntawv li enable_ssl.sh
2️⃣ Muab kev tso cai ua haujlwm:

chmod +x enable_ssl.sh

3️⃣ khiav tsab ntawv:

./enable_ssl.sh

Ces koj thiaj pom SSL daim ntawv pov thawj rau tag nrho cov subdomains Thov thiab pab kom tau txais!

⚠ Lus ceeb toom

💡 Hais Txog Cia Peb Encrypt tam sim no txwv (429 yuam kev)
Cia Peb Los Ntseeg Txwv tus naj npawb ntawm daim ntawv pov thawj thov ib tus IP hauv ib teevYog tias koj teeb tsa ntau subdomains ib zaug, koj tuaj yeem ntsib 429 yuam kev.

✅ Nyem qhov link hauv qab no mus saib cov kev daws teeb meem ▼

🔗 yuam kev: Wb Encrypt tshiab auth txheej xwm 429 tus nqi txwv, kuv yuav ua li cas? Lub sijhawm rov qab thiab cov kev daws teeb meem tau piav qhia!

• Thov nyob rau hauv batch, tsuas yog khiav ob peb subdomains ib zaug.
• Siv qhov sib txawv ACME qhov kawg(Piv txwv li, Cloudflare API daim ntawv thov daim ntawv pov thawj).
• Tos 1 teev thiab sim dua.

💡 Xyuas seb HestiaCP puas tau teeb tsa SSL daim ntawv pov thawj raug raug
Yog koj pom SSL configuration ua tsis tau tejyam, koj tuaj yeem tshawb xyuas nws manually:

v-list-web-domain $USER yoursubdomain.chenweiliang.com

Saib mus nawb SSL Yog lub teb yesYog tias tsis yog, koj yuav tsum qhib nws manually.

🎯 Cov lus xaus

Nws tsis yooj yim rau qhib SSL daim ntawv pov thawj hauv batch Qhov tseem ceeb yog siv txoj hauv kev zoo. hla HestiaCP kab hais kom ua + Plhaub tsab ntawv, koj ua tau Ib-nias HTTPS configuration rau tag nrho cov subdomains, ob qho tib si muaj txiaj ntsig thiab nyab xeeb.

💡 Qhov no yuav tsis tsuas txuag koj ntau lub sijhawm, tab sis kuj tseem yuav txhim kho koj cov qhab nia SEO thiab kev ruaj ntseg ntawm lub vev xaib., yog vim li cas tsis?

Sim nws tam sim no thiab ntxiv HTTPS kev tiv thaiv rau koj cov subdomains kom lawv muaj kev nyab xeeb thiab kev tshaj lij! 🚀