Otu esi eme ka asambodo SSL (gụnyere HTTPS redirection & HSTS) maka subdomains HestiaCP na batches?

Ị hụtụla ọnọdụ a? I ji nlezianya hazie sava HestiaCP wee mepụta subdomain niile, mana ị ga-achọpụta na ị ga-eji aka gị tinye akwụkwọ maka asambodo SSL otu otu? 🤯 Nke ahụ bụ nnukwu nsogbu!

Echegbula onwe gị, taa m ga-akụziri gị otu esi eme ka asambodo SSL dị ukwuu site n'otu pịa . Ọ bụghị naanị na ọ gụnyere asambodo Let's Encrypt , kamakwa ọ na-enye ohere ozugbo maka ntụgharị HTTPS na HSTS (HTTP Strict Transport Security).

🔥 Gịnị kpatara na-enyere SSL aka na nnukwu?

I nwere ike iche, "Enweghị m ike ịpị ha otu otu n'aka?" N'ezie ị nwere ike, mana ọ bụrụ na ị nwere ọtụtụ ma ọ bụ narị otu subdomains , ime ya n'aka abụghị naanị ịta onwe gị ahụhụ!

Nhazi ogbe nwere uru ndị a:
✔ Chekwa oge: Otu-pịa ogbugbu, ọ dịghị mkpa iji aka pịa.
✔ Zere mwepu: Belata mmejọ mmadụ wee hụ na echekwabara subdomains niile.
✔ Manye HTTPS: redirect HTTP na-akpaghị aka -> HTTPS, melite SEO Akara.
✔ HSTS nchekwa hardening: Gbochie mwakpo mmadụ n'etiti ma mee ka saịtị ahụ dịkwuo nchebe.

💡 Usoro ọrụ akọwapụtara

Na-esote, anyị ga-eji ngwa iwu nke na-abịa na HestiaCP iji dee edemede shei dị mfe iji jikwaa nhazi SSL maka subdomains niile ngwa ngwa.

📝 Nzọụkwụ 1: Nweta ndepụta subdomains

Were ya na ngalaba isi gị bụ chenweiliang.com, ị gbakwunyela ọtụtụ subdomains, dịka ọmụmaatụ:

• en.chenweiliang.com
• ru.chenweiliang.com
• la.chenweiliang.com
• lv.chenweiliang.com

N'edemede ahụ, naanị anyị kwesịrị idowe ndepụta prefixes subdomain, dịka ọmụmaatụ:

SUBDOMAINS="en ru la lv"

E mesịa, anyị ga-apụ site na subdomains ndị a wee tinye akwụkwọ maka asambodo SSL otu otu.

📜 Nzọụkwụ 2: Dee edemede iji mee ka asambodo SSL dị na batches

HestiaCP na-enye ngwaọrụ iwu , nke na-enye anyị ohere ịrụ ọrụ metụtara SSL site na iji iwu atọ ndị a:

• v-add-letsencrypt-domain → Tinye akwụkwọ maka SSL akwụkwọ
• v-add-web-domain-ssl-force → Manye HTTPS
• v-add-web-domain-ssl-hsts → Kwado HSTS

Edemede zuru oke dị ka ndị a (detuo ma mee ya ozugbo) :

#!/bin/bash

# HestiaCP 用户名
USER="youruser"
# 你的主域名
DOMAIN="chenweiliang.com"
# 需要启用 SSL 的子域名前缀
SUBDOMAINS="en ru la lv"
# 遍历每个子域名，依次开启 SSL
for SUB in $SUBDOMAINS
do
    FULL_DOMAIN="$SUB.$DOMAIN"
    echo "🚀 在启用 $FULL_DOMAIN 的 SSL 配置..."

    # 申请 Let's Encrypt 证书
    v-add-letsencrypt-domain $USER $FULL_DOMAIN
    if [ $? -ne 0 ]; then
        echo "❌ 错误：获取 $FULL_DOMAIN SSL 证书失败（可能触发 Let's Encrypt 429 限流），请稍后重试。"
        continue
    fi

    # 强制 HTTPS 重定向
    v-add-web-domain-ssl-force $USER $FULL_DOMAIN

    # 启用 HSTS（HTTP 严格传输安全）
    v-add-web-domain-ssl-hsts $USER $FULL_DOMAIN

    echo "✅ $FULL_DOMAIN SSL 配置完成！"
done
echo "🎉 所有子域名 SSL 配置操作结束！"

🚀 Nzọụkwụ 3: Mepụta edemede ahụ

Ugbu a edere edemede ahụ, ka anyị mee ya!

1️⃣ Chekwaa edemede dị ka enable_ssl.sh
2️⃣ Nye ikike igbu:

chmod +x enable_ssl.sh

3️⃣ Gbaa edemede ahụ :

./enable_ssl.sh

Mgbe ahụ ị ga-ahụ na a na-etinye asambodo SSL maka subdomain niile na akpaghị aka maka ma rụọ ọrụ!

⚠ ndetu

💡 Banyere Ka anyị Encrypt mmachi ugbu a (njehie 429)
Ka anyị zoo Amachi ọnụ ọgụgụ nke akwụkwọ arịrịọ kwa IP n'ime otu awaỌ bụrụ na ị hazie ọtụtụ subdomains ozugbo, ị nwere ike izute 429 mperi.

✅ Pịa njikọ dị n'okpuru ka ịlele ihe ngwọta ▼

🔗Error: Ka anyị ezoro ezo ọkwa ọnụọgụ ọnụọgụ ọhụrụ 429, gịnị ka m ga-eme? Oge mgbake na ngwọta kọwara!

• Tinye na batches, naanị na-agba ọsọ subdomains ole na ole n'otu oge.
• Iji njedebe ACME dị iche(Ọmụmaatụ Igwe ojii Ngwa asambodo API.
• Chere 1 elekere wee nwaa ọzọ.

💡 Lelee ma HestiaCP etinyela asambodo SSL nke ọma
Ọ bụrụ na ịchọta Nhazi SSL dara, ị nwere ike iji aka lelee ya:

v-list-web-domain $USER yoursubdomain.chenweiliang.com

Lelee SSL Ọ bụ ubi yesỌ bụrụ na ọ bụghị, ịkwesịrị iji aka mee ya.

🎯 Mmechi

Ime ka asambodo SSL dị n'ọtụtụ ebe sie ike; isi ihe dị mkpa bụ iji usoro ziri ezi. Site na ngwaọrụ iwu HestiaCP na shei scripts , ị nwere ike hazie HTTPS maka subdomains niile na otu pịa , na-enweta ma arụmọrụ na nchekwa.

💡Nke a agaghị azọpụta gị oge dị ukwuu, kamakwa ọ ga-eme ka akara SEO gị na nchekwa weebụsaịtị gị ka mma , yabụ gịnị kpatara na ọ gaghị azọpụta gị?

Gbalịa ya ugbu a ma tinye nchebe HTTPS na subdomains gị iji mee ka ha nwekwuo nchebe na ọkachamara! 🚀