사전조건
Centos가 설치된 머신 또는 가상머신
Docker 설치
Docker Compose 설치
Docker-compose 공식 가이드
Certbot 설치
SSL 인증서 생성
사전조건
- DNS Recode 'A' SubDomain 생성
[root@centos confluence-docker-compose]# certbot-auto certonly --cert-name wiki.iisanse.com -d wiki.iisanse.com Saving debug log to /var/log/letsencrypt/letsencrypt.log How would you like to authenticate with the ACME CA? - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 1: Spin up a temporary webserver (standalone) 2: Place files in webroot directory (webroot) - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Select the appropriate number [1-2] then [enter] (press 'c' to cancel): 1 Plugins selected: Authenticator standalone, Installer None Obtaining a new certificate Performing the following challenges: http-01 challenge for wiki.iisanse.com Waiting for verification... Cleaning up challenges Subscribe to the EFF mailing list (email: sooabia@gmail.com). IMPORTANT NOTES: - Congratulations! Your certificate and chain have been saved at: /etc/letsencrypt/live/wiki.iisanse.com/fullchain.pem Your key file has been saved at: /etc/letsencrypt/live/wiki.iisanse.com/privkey.pem Your cert will expire on 2021-01-18. To obtain a new or tweaked version of this certificate in the future, simply run certbot-auto again. To non-interactively renew *all* of your certificates, run "certbot-auto renew" - If you like Certbot, please consider supporting our work by: Donating to ISRG / Let's Encrypt: https://letsencrypt.org/donate Donating to EFF: https://eff.org/donate-le [root@centos confluence-docker-compose]#
인증서 복사
[root@centos confluence-docker-compose]# cp /etc/letsencrypt/live/wiki.iisanse.com/fullchain.pem ssl [root@centos confluence-docker-compose]# cp /etc/letsencrypt/live/wiki.iisanse.com/privkey.pem ssl