Momwe mungatsegulire satifiketi za SSL (kuphatikizanso HTTPS kuwongolera & HSTS) kwa ma subdomain a HestiaCP m'magulu?

Kodi mudakumanapo ndi vutoli? Mwakhazikitsa seva ya HestiaCP mosamala ndikupanga ma subdomain onse, koma mwapeza kuti muyenera kulembetsa ndikusintha ma SSL certificate pamanja chimodzi ndi chimodzi? 🤯 Ndizovuta kwambiri!

Musadandaule, lero ndikuphunzitsani njira yoyatsira ma SSL certificate ambiri podina kamodzi kokha . Sikuti imangophatikizapo ma certificate a Let's Encrypt okha , komanso imalola mwachindunji HTTPS automatic redirection ndi HSTS (HTTP Strict Transport Security).

🔥 Chifukwa chiyani mumathandizira SSL zambiri?

Mungaganize kuti, "Kodi sindingathe kungodina pamanja chimodzi ndi chimodzi?" Inde mungathe, koma ngati muli ndi ma subdomain ambiri kapena mazana ambiri , kuchita izi pamanja ndi kudzizunza!

Kukonza batch kuli ndi ubwino wotsatirawa:
✔ Sungani nthawi: Dinani kamodzi, palibe chifukwa chodina pamanja.
✔ Pewani zosiyidwa: Chepetsani zolakwika za anthu ndikuwonetsetsa kuti ma subdomain onse ndi otetezeka.
✔ Tsimikizirani HTTPS: Yendetsaninso HTTP -> HTTPS, sinthani SEO Chogoli.
✔ Kulimbitsa chitetezo cha HSTS: Pewani kuwukira kwa anthu apakati ndikupangitsa kuti tsambalo likhale lotetezeka kwambiri.

💡 Njira zina zogwirira ntchito

Kenako, tidzagwiritsa ntchito chida cha mzere wolamula chomwe chimabwera ndi HestiaCP kuti tilembe script yosavuta ya shell kuti tigwiritse ntchito mosavuta makonzedwe a SSL a ma subdomain onse.

📝 Khwerero 1: Pezani mndandanda wamadomain

Tangoganizani kuti domain yanu yoyamba ndi chenweiliang.com, mwawonjezera ma subdomain angapo, mwachitsanzo:

• en.chenweiliang.com
• ru.chenweiliang.com
• la.chenweiliang.com
• lv.chenweiliang.com

Mu script, timangofunika kusunga mndandanda wa prefixes subdomain, mwachitsanzo:

SUBDOMAINS="en ru la lv"

Pambuyo pake tidzadutsa ma subdomains awa ndikufunsira satifiketi ya SSL imodzi ndi imodzi.

📜 Khwerero 2: Lembani script kuti mulowetse ziphaso za SSL mumagulu

HestiaCP imapereka chida cholamula , chomwe chimatithandiza kuchita ntchito zokhudzana ndi SSL pogwiritsa ntchito malamulo atatu otsatirawa:

• v-add-letsencrypt-domain → Lemberani satifiketi ya SSL
• v-add-web-domain-ssl-force → Yambitsani HTTPS
• v-add-web-domain-ssl-hsts → Yambitsani HSTS

Script yonse ndi iyi: (koperani ndikuchita mwachindunji) :

#!/bin/bash

# HestiaCP 用户名
USER="youruser"
# 你的主域名
DOMAIN="chenweiliang.com"
# 需要启用 SSL 的子域名前缀
SUBDOMAINS="en ru la lv"
# 遍历每个子域名，依次开启 SSL
for SUB in $SUBDOMAINS
do
    FULL_DOMAIN="$SUB.$DOMAIN"
    echo "🚀 在启用 $FULL_DOMAIN 的 SSL 配置..."

    # 申请 Let's Encrypt 证书
    v-add-letsencrypt-domain $USER $FULL_DOMAIN
    if [ $? -ne 0 ]; then
        echo "❌ 错误：获取 $FULL_DOMAIN SSL 证书失败（可能触发 Let's Encrypt 429 限流），请稍后重试。"
        continue
    fi

    # 强制 HTTPS 重定向
    v-add-web-domain-ssl-force $USER $FULL_DOMAIN

    # 启用 HSTS（HTTP 严格传输安全）
    v-add-web-domain-ssl-hsts $USER $FULL_DOMAIN

    echo "✅ $FULL_DOMAIN SSL 配置完成！"
done
echo "🎉 所有子域名 SSL 配置操作结束！"

🚀 Khwerero 3: Pangani script

Tsopano popeza script yalembedwa, tiyeni tiyendetse!

1️⃣ Sungani zolembazo ngati enable_ssl.sh
2️⃣ Perekani zilolezo zochitira:

chmod +x enable_ssl.sh

3️⃣ Yendetsani script :

./enable_ssl.sh

Kenako mutha kuwona kuti ma SSL certificate a ma subdomain onse akuyikidwa ndikuyatsidwa okha!

⚠ Ndemanga

💡 About Let's Encrypt malire apano (zolakwika 429)
Tiyeni Tilembetse Chepetsani kuchuluka kwa zopempha za satifiketi pa IP pasanathe ola limodziMukakonza ma subdomain ambiri nthawi imodzi, mutha kukumana 429 Cholakwika.

✅ Dinani ulalo womwe uli pansipa kuti muwone yankho ▼

🔗Zolakwika: Tiyeni Tilembetse malire atsopano a auth 429, nditani? Kuchira nthawi ndi mayankho anafotokoza!

• Ikani m'magulu, kungoyendetsa ma subdomain ochepa panthawi imodzi.
• Kugwiritsa ntchito komaliza kosiyana kwa ACME(Mwachitsanzo Cloudflare (Kufunsira satifiketi ya API).
• Dikirani ola limodzi ndikuyesanso.

💡 Onani ngati HestiaCP yayika bwino satifiketi ya SSL
Ngati mwapeza Kusintha kwa SSL kwalephera, mutha kuyang'ana pamanja:

v-list-web-domain $USER yoursubdomain.chenweiliang.com

Onani SSL Ndi munda yesNgati sichoncho, muyenera kuyiyambitsa pamanja.

🎯 Mapeto

Kutsegula ma SSL certificate ambiri sikovuta; mfundo yaikulu ndikugwiritsa ntchito njira yoyenera. Ndi zida za HestiaCP command-line ndi shell scripts , mutha kukonza HTTPS ya ma subdomain onse ndi kudina kamodzi , zomwe zimapangitsa kuti zikhale zogwira mtima komanso zotetezeka.

💡Izi sizingokuthandizani kusunga nthawi yambiri, komanso zidzakuthandizani kukulitsa luso lanu la SEO komanso chitetezo cha tsamba lanu , nanga bwanji osatero?

Yesani tsopano ndikuwonjezera chitetezo cha HTTPS kumadera anu kuti akhale otetezeka komanso akatswiri! 🚀