기본 콘텐츠로 건너뛰기

Ubuntu SSL 인증서 받기


# SSL 발급을 위한 디렉토리 생성

sudo mkdir -p /var/www/letsencrypt/.well-known/acme-challenge


# apt 업데이트

sudo apt update


# nginx 설치

sudo apt install nginx-core


# ubuntu 계정에 권한 및 파일 수정 권한을 부여

sudo touch /etc/nginx/snippets/letsencrypt.conf

sudo chown root:ubuntu /etc/nginx/snippets/letsencrypt.conf

sudo chmod 775 /etc/nginx/snippets/letsencrypt.conf


# /etc/nginx/snippets/letsencrypt.conf 열기

sudo vi /etc/nginx/snippets/letsencrypt.conf

# /etc/nginx/snippets/letsencrypt.conf 파일에 아래 텍스트 입력 후 저장

location ^~ /.well-known/acme-challenge/ {
default_type "text/plain";
root /var/www/letsencrypt;
}


# /etc/nginx/sites-available/default 파일 수정

sudo vi /etc/nginx/sites-available/default

# server_name _; # _를 xxxx.com으로 변경, xxxx는 구매한 도매인

# server_name xxxx.com; 추가

# include /etc/nginx/snippets/letsencrypt.conf; 추가

##
# You should look at the following URL's in order to grasp a solid understanding
# of Nginx configuration files in order to fully unleash the power of Nginx.
# https://www.nginx.com/resources/wiki/start/
# https://www.nginx.com/resources/wiki/start/topics/tutorials/config_pitfalls/
# https://wiki.debian.org/Nginx/DirectoryStructure
#
# In most cases, administrators will remove this file from sites-enabled/ and
# leave it as reference inside of sites-available where it will continue to be
# updated by the nginx packaging team.
#
# This file will automatically load configuration files provided by other
# applications, such as Drupal or Wordpress. These applications will be made
# available underneath a path with that package name, such as /drupal8.
#
# Please see /usr/share/doc/nginx-doc/examples/ for more detailed examples.
##

# Default server configuration
#
server {
        listen 80 default_server;
        listen [::]:80 default_server;

        # SSL configuration
        #
        # listen 443 ssl default_server;
        # listen [::]:443 ssl default_server;
        #
        # Note: You should disable gzip for SSL traffic.
        # See: https://bugs.debian.org/773332
        #
        # Read up on ssl_ciphers to ensure a secure configuration.
        # See: https://bugs.debian.org/765782
        #
        # Self signed certs generated by the ssl-cert package
        # Don't use them in a production server!
        #
        # include snippets/snakeoil.conf;

        root /var/www/html;

        # Add index.php to the list if you are using PHP
        index index.html index.htm index.nginx-debian.html;

        server_name _; # _를 example.com 처럼 바꿈

include /etc/nginx/snippets/letsencrypt.conf;

        location / {
                # First attempt to serve request as file, then
                # as directory, then fall back to displaying a 404.
                try_files $uri $uri/ =404;
        }

        # pass PHP scripts to FastCGI server
        #
        #location ~ \.php$ {
        #       include snippets/fastcgi-php.conf;
        #
        #       # With php-fpm (or other unix sockets):
        #       fastcgi_pass unix:/run/php/php7.4-fpm.sock;
        #       # With php-cgi (or other tcp sockets):
        #       fastcgi_pass 127.0.0.1:9000;
        #}

        # deny access to .htaccess files, if Apache's document root
        # concurs with nginx's one
        #
        #location ~ /\.ht {
        #       deny all;
        #}
}


# Virtual Host configuration for example.com
#
# You can move that to a different file under sites-available/ and symlink that
# to sites-enabled/ to enable it.
#
#server {
#       listen 80;
#       listen [::]:80;
#
#       server_name example.com;
#
#       root /var/www/example.com;
#       index index.html;
#
#       location / {
#               try_files $uri $uri/ =404;
#       }
#}


# nginx 적용

sudo nginx -t


# nginx 다시시작

sudo service nginx restart


# snap core 설치

sudo snap install core; sudo snap refresh core


# certbot 구버전 제거

sudo apt remove certbot


# snap으로 certbot 신버전 설치

sudo snap install --classic certbot


# /snap/bin/certbot -> /usr/bin/certbot

sudo ln -s /snap/bin/certbot /usr/bin/certbot


# ssl 인증서 받기

sudo certbot certonly --webroot --agree-tos --no-eff-email --email example@example.com -w /var/www/letsencrypt -d example.com -d www.example.com

// example@example.com을 자신의 이메일로 바꾸고, example.com을 자신의 도메인으로 바꾼다


# 인증서 위치 확인 *

sudo ls /etc/letsencrypt/live/


# 인증서 확인 *

sudo ls -al /etc/letsencrypt/live/example.com // 자신의 도메인을 example.com처럼 입력한다


# 자동 업데이트 테스트 *

sudo certbot renew --dry-run


# pem 파일 확인 *

sudo ls -al /etc/letsencrypt/live/example.com


# 인증서 적용

sudo openssl dhparam -out /etc/nginx/dhparam.pem 4096


# /etc/nginx/snippets/ssl.conf를 열기

sudo vi /etc/nginx/snippets/ssl.conf


# /etc/nginx/snippets/ssl.conf에 밑에 코드 복사 후 저장

ssl_session_timeout 1d;
ssl_session_cache shared:SSL:50m;
ssl_session_tickets off;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
ssl_dhparam /etc/nginx/dhparam.pem;
ssl_ciphers ECDHE-RSA-AES256-GCM-SHA512:DHE-RSA-AES256-GCM-SHA512:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384;
ssl_ecdh_curve secp384r1;
ssl_prefer_server_ciphers on;
ssl_stapling on;
ssl_stapling_verify on;

resolver 8.8.8.8 8.8.4.4;
add_header Strict-Transport-Security "max-age=15768000; includeSubdomains; preload";
add_header X-Content-Type-Options nosniff;
add_header X-Frame-Options "SAMEORIGIN";


# /etc/nginx/snippets/ssl.conf 접근 권한 막기

sudo chmod 644 /etc/nginx/snippets/ssl.conf


# /etc/nginx/sites-available/default 열기

sudo vi /etc/nginx/sites-available/default


# /etc/nginx/sites-available/default에 밑에 내용 복사 후 저장. example.com은 자신의 도메인으로 바꾼다

# Default HTTPS server configuration
server {
listen 443 ssl http2 default_server;
listen [::]:443 ssl http2 default_server;
server_name example.com;

ssl_certificate /etc/letsencrypt/live/example.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/example.com/fullchain.pem;
include /etc/nginx/snippets/ssl.conf;

root /var/www/html;
index index.php index.html index.htm index.nginx-debian.html;

location / {
#try_files $uri $uri/ =404;
#if (!-e $request_filename) {
# rewrite ^.*$ /index.php last;
#}
proxy_pass http://localhost:8080;
}

location ~ \.php$ {
include snippets/fastcgi-php.conf;
fastcgi_pass unix:/run/php/php7.4-fpm.sock;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
include fastcgi_params;
fastcgi_read_timeout 300;
}

location ~ /\.ht {
deny all;
}
}

# HTTPS www. server configuration
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name www.example.com;

ssl_certificate /etc/letsencrypt/live/example.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/example.com/fullchain.pem;
include /etc/nginx/snippets/ssl.conf;

location / {
return 301 https://example.com$request_uri;
}
}


# Default server configuration
server {
listen 80;
listen [::]:80 default_server;
server_name example.com;

include /etc/nginx/snippets/letsencrypt.conf;

location / {
return 301 https://example.com$request_uri;
}
}

# HTTP - CNAME Connect www.example.com to example.com
server {
listen 80;
listen [::]:80;
server_name www.example.com;

include /etc/nginx/snippets/letsencrypt.conf;

location / {
return 301 https://www.example.com$request_uri;
}
}


sudo nginx -t


sudo service nginx restart


# 갱신 방법

sudo certbot renew --dry-run


# 갱신 방법 2

sudo certbot certonly --webroot --agree-tos --no-eff-email --email 이메일주소 -w /var/www/letsencrypt -d 도메인주소 -d www.도메인주소


# 자동 갱신

```bash

cd /bin

sudo vim letsencrypt.sh

```


```bash

#!/bin/sh

sudo service nginx stop

sudo certbot renew > ~/server/certbot/le_renew.log

sudo fuser -k 80/tcp

sudo service nginx start

```


```bash

sudo chmod +x letsencrypt.sh

```


```bash

sudo crontab -e

```


```bash

30 4 * * 0 letsencrypt.sh

```


```bash

sudo service cron start

출처 : https://techhans.tistory.com/41

출처 : https://devbono.com/https-%EC%82%AC%EC%9A%A9%ED%95%98%EA%B8%B0lets-encrypt-%EC%9D%B8%EC%A6%9D%EC%84%9C-%EC%82%AC%EC%9A%A9/


태그

라벨:

이 블로그의 인기 게시물

React 시작하기

App.js import Hello from './comp/Hello' ; function App() {   return (     < div className = "App" >       < Hello />     </ div >   ); } export default App; export default App; Hello.js import './Hello.css' ; function Hello() {   return (     < h1 > Hello, World! </ h1 >   ); } export default Hello; Hello.css h1 {   color : red; }
더보기

Python 인공신경망 추천 시스템(회귀)

예제 # 인공신경망을 이용한 추천 시스템 # - 순차형(Sequential) 신경망 생성법 # - 함수형(Functional) 신경망 생성법 # - 지금까지 나온 추천 방식 중에서 가장 좋은 성능 # - Regression 방식으로 분석가능 # - 영화의 평점 정보(userid, movieid, rating) # - 이용자는 영화에 대한 취향이 모두 다르다 # - 영화는 다양한 장르가 혼합되어 있다 # - 이용자는 자신의 취향에 맞는 영화에 높은 rating을 제시함 # - 어떤 이용자에게 어떤 장르의 영화를 추천할 것인가? # __call__() 함수를 가진 클래스는 파이썬 함수 callable(클래스)를 사용하면 True를 반환한다 from tensorflow.keras.models import Sequential, Model from tensorflow.keras.layers import Dense, Embedding, Input input = Input(shape=(1,)) # 함수형 신경망 생성법 hidden1 = Dense(2, activation='relu')(input) # Dense(2, activation='relu')__call__() hidden2 = Dense(2, activation='relu')(hidden1) # callable.object callable(Dense) # __call__ 함수가 있으면 True, 없으면 False # Using Functional API from keras.models import Sequential from keras.layers import * model = Sequential() model.add(Input(shape=(3,))) # Input tensor model.add(Dense(4)) # hidden layer 1 model.add(Dense(units=4)) # hidden layer 2 model.add(Dense(units=1)) # ou...
더보기

Python Sklearn make_regression

from sklearn.datasets import make_regression import matplotlib.pyplot as plt X, y = make_regression(n_samples=250, n_features=1, noise=50, random_state=2) plt.scatter(X,y, s=2) plt.show() from sklearn.linear_model import LinearRegression from sklearn.model_selection import train_test_split # 한글 깨짐 없이 나오게 설정 from matplotlib import rcParams # 인코딩 폰트 설정 rcParams['font.family'] = 'New Gulim' rcParams['font.size'] = 10 x_train, x_test, y_train, y_test = train_test_split(X,y, test_size=.20, random_state=0) x_train.shape, x_test.shape, y_train.shape, y_test.shape # 모델 생성 model = LinearRegression() # 학습하기 model.fit(x_train, y_train) # 가중치, 편향치 구하기 model.coef_, model.intercept_ # (array([90.11061494]), 2.4224269924448585) # 결정 계수 model.score(x_train, y_train) # 0.789267454050733 # 추정 pred = model.predict(x_test) # 산점도 plt.scatter(x_test,y_test) plt.plot(x_test, pred, 'r-') plt.show() # 추정 model.predict([[3.0]]) # 학습할 때 주는 데이터의 형식을 따른다 # x의 최소값, 최대값을 계수와 절편을 사용하여 ...
더보기