Uzenza njani iziqinisekiso ze-SSL (kubandakanywa ulwalathiso lwe-HTTPS kwakhona & ne-HSTS) kwii-subdomains ze-HestiaCP kwiibhetshi?

Ngaba wakha wadibana nale meko? Ucwangcise iseva yeHestiaCP ngononophelo waza wadala zonke ii-subdomains, kodwa wafumanisa ukuba kufuneka ufake isicelo ngesandla kwaye ulungiselele izatifikethi ze-SSL nganye nganye? 🤯 Loo nto inzima kakhulu!

Ungakhathazeki, namhlanje ndiza kukufundisa icebo lokuvula izatifikethi ze-SSL ngobuninzi ngokucofa kube kanye . Ayibandakanyi nje kuphela izatifikethi ze-Let's Encrypt , kodwa ikwavumela ngokuthe ngqo ukuqondisa kwakhona kwe-HTTPS ngokuzenzekelayo kunye ne -HSTS (HTTP Strict Transport Security).

🔥 Kutheni uvula i-SSL ngobuninzi?

Usenokucinga, "Andinakukwazi ukuzicofa ngesandla nganye nganye?" Ewe unako, kodwa ukuba unezininzi okanye amakhulu zee-subdomain , ukwenza ngesandla kukuzithuthumbisa!

Ukusetyenzwa kwebhetshi kunezi nzuzo zilandelayo:
✔ Yonga ixesha: Ukucofa okukodwa, akukho mfuneko yokucofa ngesandla.
✔ Kuphephe ukushiyeka: Nciphisa iimpazamo zabantu kwaye uqinisekise ukuba zonke ii-subdomains zikhuselekile.
✔ Ukunyanzeliswa kwe-HTTPS: Ukuqondisa ngokuzenzekelayo iHTTP -> HTTPS, phucula seo Inqaku.
✔ Ukuqina kokhuseleko lwe-HSTS: Thintela uhlaselo lomntu ophakathi kwaye wenze indawo ikhuseleke ngakumbi.

💡 Amanyathelo okusebenza athile

Okulandelayo, siza kusebenzisa isixhobo somgca womyalelo esiza neHestiaCP ukubhala iskripthi esilula seshell ukuze sikwazi ukuphatha ngokulula uqwalaselo lwe-SSL kuzo zonke ii-subdomains.

📝 Inyathelo loku-1: Fumana uluhlu lweendawo ezingaphantsi

Cinga ukuba indawo yakho yokuqala chenweiliang.com, wongeze idomain ezininzi, umzekelo:

• en.chenweiliang.com
• ru.chenweiliang.com
• la.chenweiliang.com
• lv.chenweiliang.com

Kwiskripthi, sifuna kuphela ukugcina uluhlu lwe-subdomain prefixes, umzekelo:

SUBDOMAINS="en ru la lv"

Emva kwexesha siya kuthubeleza kwezi subdomains kwaye sifake izicelo zezatifikethi ze-SSL nganye nganye.

📜 Inyathelo lesi-2: Bhala iscript ukwenza izatifikethi ze-SSL zisebenze kwiibhetshi

I-HestiaCP ibonelela ngesixhobo somgca womyalelo , esisivumela ukuba senze imisebenzi enxulumene ne-SSL sisebenzisa le miyalelo mithathu ilandelayo:

• v-add-letsencrypt-domain → Faka isicelo sesatifikethi se-SSL
• v-add-web-domain-ssl-force → Ukunyanzelisa i-HTTPS
• v-add-web-domain-ssl-hsts → Yenza i-HSTS isebenze

Iskripthi esipheleleyo silandelayo (khuphela kwaye uphumeze ngokuthe ngqo) :

#!/bin/bash

# HestiaCP 用户名
USER="youruser"
# 你的主域名
DOMAIN="chenweiliang.com"
# 需要启用 SSL 的子域名前缀
SUBDOMAINS="en ru la lv"
# 遍历每个子域名，依次开启 SSL
for SUB in $SUBDOMAINS
do
    FULL_DOMAIN="$SUB.$DOMAIN"
    echo "🚀 在启用 $FULL_DOMAIN 的 SSL 配置..."

    # 申请 Let's Encrypt 证书
    v-add-letsencrypt-domain $USER $FULL_DOMAIN
    if [ $? -ne 0 ]; then
        echo "❌ 错误：获取 $FULL_DOMAIN SSL 证书失败（可能触发 Let's Encrypt 429 限流），请稍后重试。"
        continue
    fi

    # 强制 HTTPS 重定向
    v-add-web-domain-ssl-force $USER $FULL_DOMAIN

    # 启用 HSTS（HTTP 严格传输安全）
    v-add-web-domain-ssl-hsts $USER $FULL_DOMAIN

    echo "✅ $FULL_DOMAIN SSL 配置完成！"
done
echo "🎉 所有子域名 SSL 配置操作结束！"

🚀 Inyathelo 3: Phumeza iskripthi

Ngoku ukuba iskripthi sibhaliwe, masiyiqhube!

1️⃣ Gcina umbhalo njenge enable_ssl.sh
2️⃣ Ukunikezelwa kweemvume zokuphumeza:

chmod +x enable_ssl.sh

3️⃣ Sebenzisa iskripthi :

./enable_ssl.sh

Emva koko ungabona ukuba izatifikethi ze-SSL zazo zonke ii-subdomains ziyafakwa kwaye ziyasebenza ngokuzenzekelayo!

⚠ Amanqaku

💡 Malunga ne-Let Encrypting yangoku umda (impazamo eyi-429)
Masibhale Nciphisa inani lezicelo zesatifikethi nge-IP ngeyure enyeUkuba uqwalasela i-subdomains ezininzi kakhulu ngexesha elinye, unokuhlangabezana 429 Impazamo,

✅ Cofa ikhonkco elingezantsi ukujonga isisombululo ▼

🔗Impazamo: Masibethele imeko entsha ye-auth 429 umda wexabiso, kufuneka ndenze ntoni? Ixesha lokubuyisela kunye nezisombululo zichazwe!

• Faka isicelo kwiibhetshi, iqhuba kuphela isubdomains ezimbalwa ngexesha.
• Ukusebenzisa isiphelo se-ACME eyahlukileyo(Umzekelo Cloudflare (Isicelo sesatifikethi se-API).
• Linda iyure enye kwaye uzame kwakhona,

💡 Khangela ukuba iHestiaCP isifake ngokuchanekileyo isatifikethi se-SSL
Ukuba ufumana Ubumbeko lwe-SSL aluphumelelanga, unokuyijonga ngesandla:

v-list-web-domain $USER yoursubdomain.chenweiliang.com

Thatha ujongo SSL Ngaba intsimi yesUkuba akunjalo, kufuneka uyivule ngesandla.

🎯 Ukuqukumbela

Ukuvula izatifikethi ze-SSL ngobuninzi akunzima; isitshixo kukusebenzisa indlela eyiyo. Ngezixhobo zomyalelo we-HestiaCP kunye nezikripthi ze-shell , ungamisela i-HTTPS kuzo zonke ii-subdomains ngokucofa kube kanye , ufezekise ukusebenza kakuhle kunye nokhuseleko.

💡Oku akuyi kukugcina ixesha elininzi kuphela, kodwa kuya kuphucula amanqaku akho e-SEO kunye nokhuseleko lwewebhusayithi , kutheni ke kungenjalo?

Yizame ngoku kwaye wongeze ukhuseleko lwe-HTTPS kwi-subdomains yakho ukuze uzenze zikhuseleke ngakumbi kwaye zinobuchule! 🚀