E faʻafefea ona faʻatagaina tusi faamaonia SSL (e aofia ai le HTTPS redirection & HSTS) mo HestiaCP subdomains i vaega?

Pe na e fetaiaʻi ma se tulaga faapena? Fausia ma se taumafaiga tele HestiaCP Ua faia le server ma subdomains, ae e te iloa e te manaʻomia le faʻaoga lima ma faʻapipiʻi tusi faamaonia SSL taʻitasi? 🤯 E matua saua lava lenei mea!

Aua e te popole, o le a ou aoao atu ia te oe se togafiti i le asō. Tasi-kiliki vaega fa'agaoioia o SSL, e aofia ai e le gata Tatou Fa'ailoga Tusi Faamaonia, ma fesoasoani tuusa'o ia te oe e mafai HTTPS otometi redirection ma HSTS (HTTP Strict Transport Security).

🔥 Aisea e mafai ai e SSL ona faʻateleina?

Atonu e te mafaufau: "E le mafai ona ou kiliki i latou ma le lima, ioe, ae afai e te maua?" O le tele po'o le selau o subdomains, e mautinoa lava le fa'aleagaina e le tagata lava ia o le fa'aogaina o le lima!

O le gaosiga o vaega e iai faʻamanuiaga nei:
✔ faasaoina le taimi: Fa'atino e tasi-kiliki, e le mana'omia le kiliki ma le lima.
✔ Aloese mai mea e le faia: Faʻaitiitia mea sese a tagata ma faʻamautinoa o loʻo saogalemu uma subdomains.
✔ Fa'amalosia le HTTPS: Toe faʻafeiloaʻi otometi HTTP -> HTTPS, faʻaleleia Seo togi.
✔ HSTS malu puipuia: Puipuia osofa'iga a tagata i le ogatotonu ma fa'amautu le saite.

💡 Laasaga fa'atino fa'apitoa

Le isi, matou te faʻaogaina le meafaigaluega laina laina e sau ma HestiaCP e tusi ai se faigofie Shell Script, fai faigofie Subdomains uma Fa'atonu SSL mo .

📝 Laasaga 1: Maua se lisi o subdomains

Fa'apea o lau vaega muamua o le chenweiliang.com, ua e fa'aopoopoina le tele o subdomains, mo se fa'ata'ita'iga:

• en.chenweiliang.com
• ru.chenweiliang.com
• la.chenweiliang.com
• lv.chenweiliang.com

I totonu o le tusitusiga, matou te manaʻomia le tausia o se lisi o subdomain prefixes, mo se faʻataʻitaʻiga:

SUBDOMAINS="en ru la lv"

Mulimuli ane o le a tatou faʻaogaina nei subdomains ma talosaga mo tusi faamaonia SSL taʻitasi.

📜 Laasaga 2: Tusi se faʻamatalaga e faʻatagaina ai tusi faamaonia SSL i vaega

Ua saunia e HestiaCP Meafaigaluega Laina Poloaiga, e mafai ona matou faʻamaeʻaina galuega faʻafesoʻotaʻi SSL i tulafono nei e tolu:

• v-add-letsencrypt-domain → Talosaga mo tusi faamaonia SSL
• v-add-web-domain-ssl-force → Faʻamalosia HTTPS
• v-add-web-domain-ssl-hsts → Fa'aagaoi le HSTS

O le fa'amaumauga atoa e fa'apea (kopi ma fa'atino sa'o):

#!/bin/bash

# HestiaCP 用户名
USER="youruser"
# 你的主域名
DOMAIN="chenweiliang.com"
# 需要启用 SSL 的子域名前缀
SUBDOMAINS="en ru la lv"
# 遍历每个子域名，依次开启 SSL
for SUB in $SUBDOMAINS
do
    FULL_DOMAIN="$SUB.$DOMAIN"
    echo "🚀 在启用 $FULL_DOMAIN 的 SSL 配置..."

    # 申请 Let's Encrypt 证书
    v-add-letsencrypt-domain $USER $FULL_DOMAIN
    if [ $? -ne 0 ]; then
        echo "❌ 错误：获取 $FULL_DOMAIN SSL 证书失败（可能触发 Let's Encrypt 429 限流），请稍后重试。"
        continue
    fi

    # 强制 HTTPS 重定向
    v-add-web-domain-ssl-force $USER $FULL_DOMAIN

    # 启用 HSTS（HTTP 严格传输安全）
    v-add-web-domain-ssl-hsts $USER $FULL_DOMAIN

    echo "✅ $FULL_DOMAIN SSL 配置完成！"
done
echo "🎉 所有子域名 SSL 配置操作结束！"

🚀 Laasaga 3: Fa'atino le tala

O lea la ua uma ona tusia le tusitusiga, ia tatou tamo'e!

1️⃣ Faasaoina le tusitusiga e pei o enable_ssl.sh
2️⃣ Fa'ataga fa'atagaga:

chmod +x enable_ssl.sh

3️⃣ Fa'asolo le tala:

./enable_ssl.sh

Ona mafai lea ona e vaai SSL tusi faamaonia mo subdomains uma Fa'aoga ma fa'aaga otometi!

⚠ Faamatalaga

💡 E uiga i le Let's Encrypt i le taimi nei faʻatapulaʻaina (429 sese)
Tatou Faanatinati Fa'atapula'a le aofa'i o talosaga fa'amaonia ile IP ile tasi itulaAfai e te faʻatulagaina le tele o subdomains i le taimi e tasi, e mafai ona e feagai 429 Sese.

✅ Kiliki le sootaga i lalo e matamata ai le fofo ▼

🔗Sese: Se'i o tatou fa'ailoga fou tulaga fa'amaonia 429 tau fa'atapula'a, o le a se mea e tatau ona ou faia? Fa'amatala taimi fa'aleleia ma fofo!

• Fa'aoga i vaega, naʻo le faʻatinoina o nai subdomains i le taimi.
• Fa'aaogāina ose fa'ai'uga ACME ese(Mo se faʻataʻitaʻiga, Cloudflare API tusi talosaga).
• Faatali mo le 1 itula ma toe taumafai.

💡 Siaki pe ua sa'o ona fa'apipi'i e HestiaCP le tusipasi SSL
Afai e te mauaina Ua le manuia le seti SSL, e mafai ona e siaki ma le lima:

v-list-web-domain $USER yoursubdomain.chenweiliang.com

Vaʻai lelei SSL O le fanua yesA leai, e tatau ona e fa'agaoioi ma le lima.

🎯 Fa'ai'uga

E le faigata le faʻagaoioia o tusi faamaonia SSL i vaega O le ki o le faʻaaogaina o le auala saʻo. pasi HestiaCP laina faʻatonu + Shell script, e te mafaia Tasi-kiliki HTTPS configuration mo subdomains uma, lelei ma saogalemu.

💡 O lenei mea e le gata ina faʻasaoina oe i le tele o le taimi, ae faʻaleleia atili ai lau sikoa SEO ma le saogalemu o le upega tafaʻilagi., aisea e le fai ai?

Taumafai nei ma faʻaopopo le puipuiga HTTPS i au subdomains ina ia sili atu le saogalemu ma faʻapolofesa! 🚀