Lighttpd创建https网站

网站域名为os.loshub.com,配置如下,根据自己的来修改

$HTTP["host"] == "os.loshub.com" { 
server.name = "os.loshub.com"
server.document-root = "/home/www/vhosts/os.loshub.com/htdocs" 
server.errorlog = "/home/www/vhosts/os.loshub.com/error.log" 
accesslog.filename = "/home/www/vhosts/os.loshub.com/access.log" 
}

创建网站ssl目录

mkdir -p /home/www/vhosts/os.loshub.com/ssl/
chown -R lighttpd:lighttpd /home/www/

申请Let's encrypt免费证书

证书合并后把lets-encrypt-x3-cross-signed.pem和os.loshub.pem复制到网站的ssl目录

cat os.loshub.com.key os.crt  > os.loshub.pem
cp lets-encrypt-x3-cross-signed.pem /home/www/vhosts/os.yum.com/ssl
mv os.loshub.pem /home/www/vhosts/os.loshub.com/ssl

打开443端口

firewall-cmd --add-port=443/tcp --permanent
firewall-cmd --reload

创建新的443端口文件
vi /usr/local/lighttpd/config/vhosts.d/443os.yum.conf
复制以下代码并保存

$SERVER["socket"] == "os.loshub.com:443" {
      ssl.engine                  = "enable"
      ssl.pemfile                 = "/home/www/vhosts/os.loshub.com/ssl/os.yuncp.pem"
      ssl.ca-file           = "/home/www/vhosts/os.loshub.com/ssl/lets-encrypt-x3-cross-signed.pem"
      server.document-root        = "/home/www/vhosts/os.loshub.com/htdocs"
    }

重启Lighttpd
systemctl restart lighttpd
测试
https://os.loshub.com
还可以做个计划任务，让其每个月自动申请证书。