{"id":11620,"date":"2024-09-20T22:18:20","date_gmt":"2024-09-20T14:18:20","guid":{"rendered":"http:\/\/999.zuizhuai.cn\/?p=11620"},"modified":"2025-07-27T16:58:29","modified_gmt":"2025-07-27T08:58:29","slug":"%e4%bd%bf%e7%94%a8docker%e5%bf%ab%e9%80%9f%e9%83%a8%e7%bd%b2certd%e5%b9%b6%e8%87%aa%e5%8a%a8%e7%94%b3%e8%af%b7%e5%85%8d%e8%b4%b9%e6%b3%9b%e5%9f%9f%e5%90%8dssl%e8%af%81%e4%b9%a6","status":"publish","type":"post","link":"http:\/\/puo.cn\/?p=11620","title":{"rendered":"\u4f7f\u7528Docker\u5feb\u901f\u90e8\u7f72CertD\u5e76\u81ea\u52a8\u7533\u8bf7\u514d\u8d39\u6cdb\u57df\u540dSSL\u8bc1\u4e66"},"content":{"rendered":"

\u6700\u8fd1\u5404\u5bb6\u4e91\u670d\u52a1\u63d0\u4f9b\u5546\u5c06\u514d\u8d39DV SSL\u8bc1\u4e66\u6709\u6548\u671f\u4ece\u4e00\u5e74\u7f29\u77ed\u5230\u4e09\u4e2a\u6708\uff0c\u76f8\u6bd4\u4e4b\u4e0b\uff0cLet’s Encrypt\u5f88\u65e9\u5c31\u652f\u6301\u4e86\u514d\u8d39\u6cdb\u57df\u540dSSL\u8bc1\u4e66\u548c\u591a\u57df\u540dSSL\u8bc1\u4e66\uff0c\u6709\u6548\u671f\u4e5f\u662f\u4e09\u4e2a\u6708\u3002\u65e2\u7136\u540c\u6837\u662f\u4e09\u4e2a\u6708\u6709\u6548\u671f\uff0c\u660e\u663e\u9009\u62e9Let’s Encrypt\u63d0\u4f9b\u7684\u6cdb\u57df\u540dSSL\u8bc1\u4e66<\/strong>\u663e\u5f97\u66f4\u4e3a\u660e\u667a\u4e0e\u5408\u7406\u3002<\/p>\n

\u5bf9\u4e8e\u719f\u6089\u4f7f\u7528 acme<\/span>.<\/span>sh<\/span><\/code>\u7684\u7528\u6237\u6765\u8bf4\uff0c\u8fd9\u4e2a\u5de5\u5177\u53ef\u4ee5\u81ea\u52a8\u7533\u8bf7\u5e76\u7eed\u671f\u6cdb\u57df\u540dSSL\u8bc1\u4e66\uff0c\u6781\u5927\u5730\u7b80\u5316\u4e86\u64cd\u4f5c\u6d41\u7a0b\u3002\u6700\u8fd1\uff0cxiaoz\u53d1\u73b0\u4e86\u4e00\u6b3e\u540d\u4e3aCertD\u7684\u65b0\u5de5\u5177\uff0c\u5b83\u53ef\u4ee5\u89c6\u4e3a acme<\/span>.<\/span>sh<\/span><\/code>\u7684WEB\u7248\u672c\uff0c\u63d0\u4f9b\u4e86\u66f4\u4fbf\u6377\u7684\u64cd\u4f5c\u754c\u9762\u3002\u63a5\u4e0b\u6765\uff0c\u6211\u5c06\u6f14\u793a\u5982\u4f55\u901a\u8fc7Docker\u5feb\u901f\u90e8\u7f72CertD\u4ee5\u7533\u8bf7\u514d\u8d39\u6cdb\u57df\u540dSSL\u8bc1\u4e66\u3002<\/p>\n

\"20240921023806510\"<\/p>\n

CertD\u7279\u70b9<\/h3>\n
    \n
  • \u5168\u81ea\u52a8\u7533\u8bf7\u8bc1\u4e66\uff08\u652f\u6301\u963f\u91cc\u4e91\u3001\u817e\u8baf\u4e91\u3001\u534e\u4e3a\u4e91\u3001Cloudflare\u7b49\u5404\u79cd\u9014\u5f84\u6ce8\u518c\u7684\u57df\u540d\uff09<\/span><\/li>\n
  • \u5168\u81ea\u52a8\u90e8\u7f72\u66f4\u65b0\u8bc1\u4e66\uff08\u76ee\u524d\u652f\u6301\u90e8\u7f72\u5230\u4e3b\u673a\u3001\u90e8\u7f72\u5230\u963f\u91cc\u4e91\u3001\u817e\u8baf\u4e91\u7b49\uff09<\/span><\/li>\n
  • \u652f\u6301\u901a\u914d\u7b26\u57df\u540d\/\u6cdb\u57df\u540d\uff0c\u652f\u6301\u591a\u4e2a\u57df\u540d\u6253\u5230\u4e00\u4e2a\u8bc1\u4e66\u4e0a<\/span><\/li>\n
  • \u90ae\u4ef6\u901a\u77e5<\/span><\/li>\n
  • \u63d0\u4f9b\u79c1\u6709\u5316\u90e8\u7f72\uff0c\u4fdd\u969c\u5b89\u5168<\/span><\/li>\n
  • \u514d\u8d39<\/span><\/li>\n<\/ul>\n

    Docker\u90e8\u7f72CertD<\/h3>\n

    \u63a5\u4e0b\u6765\u535a\u4e3b\u5c06\u4f7f\u7528docker compose\u5de5\u5177\u79c1\u6709\u90e8\u7f72CertD\uff0c\u5982\u679c\u60a8\u5bf9\u6b64\u5e76\u4e0d\u719f\u6089\uff0c\u9700\u8981\u5148\u53bb\u5b66\u4e60\u4e86\u89e3\u3002<\/p>\n

    \u65b0\u5efa\u4e00\u4e2a docker<\/span>-<\/span>compose<\/span>.<\/span>yaml<\/span><\/code>\u6587\u4ef6\uff08\u5efa\u8bae\u6253\u5f00\u539f\u6587\u590d\u5236\uff09\uff0c\u5185\u5bb9\u5982\u4e0b\uff1a<\/p>\n

      \n
    1. version<\/span>:<\/span> '3.3'<\/span><\/code><\/span><\/span><\/li>\n
    2. services<\/span>:<\/span><\/code><\/span><\/span><\/li>\n
    3. certd<\/span>:<\/span><\/code><\/span><\/span><\/li>\n
    4. # \u955c\u50cf # \u2193\u2193\u2193\u2193\u2193 --- 1\u3001 \u955c\u50cf\u7248\u672c\u53f7\uff0c\u5efa\u8bae\u6539\u6210\u56fa\u5b9a\u7248\u672c\u53f7\u3010\u53ef\u9009\u3011<\/span><\/code><\/span><\/span><\/li>\n
    5. image<\/span>:<\/span> registry<\/span>.<\/span>cn<\/span>-<\/span>shenzhen<\/span>.<\/span>aliyuncs<\/span>.<\/span>com<\/span>\/<\/span>handsfree<\/span>\/<\/span>certd<\/span>:<\/span>1.23<\/span>.<\/span>1<\/span><\/code><\/span><\/span><\/li>\n
    6. container_name<\/span>:<\/span> certd <\/span># \u5bb9\u5668\u540d<\/span><\/code><\/span><\/span><\/li>\n
    7. restart<\/span>:<\/span> unless<\/span>-<\/span>stopped <\/span># \u81ea\u52a8\u91cd\u542f<\/span><\/code><\/span><\/span><\/li>\n
    8. volumes<\/span>:<\/span><\/code><\/span><\/span><\/li>\n
    9. # \u2193\u2193\u2193\u2193\u2193 ------------------------------------------------------- 2\u3001 \u6570\u636e\u5e93\u4ee5\u53ca\u8bc1\u4e66\u5b58\u50a8\u8def\u5f84,\u9ed8\u8ba4\u5b58\u5728\u5bbf\u4e3b\u673a\u7684\/data\/certd\/\u76ee\u5f55\u4e0b\u3010\u53ef\u9009\u3011<\/span><\/code><\/span><\/span><\/li>\n
    10. -<\/span> .\/<\/span>data<\/span>:<\/span>\/app\/<\/span>data<\/span><\/code><\/span><\/span><\/li>\n
    11. -<\/span> .\/<\/span>ssl<\/span>:<\/span>\/data\/<\/span>ssl<\/span><\/code><\/span><\/span><\/li>\n
    12. ports<\/span>:<\/span> # \u7aef\u53e3\u6620\u5c04<\/span><\/code><\/span><\/span><\/li>\n
    13. # \u2193\u2193\u2193\u2193 ----------------------------------------------------------3\u3001\u5982\u679c\u7aef\u53e3\u6709\u51b2\u7a81\uff0c\u53ef\u4ee5\u4fee\u6539\u7b2c\u4e00\u4e2a7001\u4e3a\u5176\u4ed6\u4e0d\u51b2\u7a81\u7684\u7aef\u53e3\u53f7\u3010\u53ef\u9009\u3011<\/span><\/code><\/span><\/span><\/li>\n
    14. -<\/span> \"7001:7001\"<\/span><\/code><\/span><\/span><\/li>\n
    15. dns<\/span>:<\/span><\/code><\/span><\/span><\/li>\n
    16. # \u5982\u679c\u51fa\u73b0getaddrinfo ENOTFOUND\u7b49\u9519\u8bef\uff0c\u53ef\u4ee5\u5c1d\u8bd5\u4fee\u6539\u6216\u6ce8\u91cadns\u914d\u7f6e<\/span><\/code><\/span><\/span><\/li>\n
    17. -<\/span> 223.5<\/span>.<\/span>5.5<\/span><\/code><\/span><\/span><\/li>\n
    18. -<\/span> 223.6<\/span>.<\/span>6.6<\/span><\/code><\/span><\/span><\/li>\n
    19. -<\/span> 8.8<\/span>.<\/span>8.8<\/span><\/code><\/span><\/span><\/li>\n
    20. -<\/span> 8.8<\/span>.<\/span>4.4<\/span><\/code><\/span><\/span><\/li>\n
    21. environment<\/span>:<\/span> # \u73af\u5883\u53d8\u91cf<\/span><\/code><\/span><\/span><\/li>\n
    22. -<\/span> TZ<\/span>=<\/span>Asia<\/span>\/<\/span>Shanghai<\/span><\/code><\/span><\/span><\/li>\n
    23. -<\/span> certd_system_resetAdminPassword<\/span>=<\/span>false<\/span><\/code><\/span><\/span><\/li>\n
    24. -<\/span> certd_cron_immediateTriggerOnce<\/span>=<\/span>false<\/span><\/code><\/span><\/span><\/li>\n
    25. -<\/span> VITE_APP_ICP_NO<\/span>=<\/span><\/code><\/span><\/span><\/li>\n<\/ol>\n
        \n
      • 1.23<\/span>.<\/span>1<\/span><\/code>\uff1a\u4e3aCertD\u7248\u672c\u53f7\uff0c\u4f60\u4e5f\u53ef\u4ee5\u4fee\u6539\u4e3a\u00a0latest<\/span><\/code><\/span><\/span><\/li>\n
      • .\/<\/span>data<\/span><\/code>\uff1a\u672c\u673a\u6302\u8f7d\u76ee\u5f55\uff0c\u7528\u4e8e\u6301\u4e45\u5316\u4fdd\u5b58CertD\u6570\u636e\uff0c\u60a8\u53ef\u4ee5\u4fee\u6539\u4e3a\u7edd\u5bf9\u8def\u5f84<\/span><\/li>\n
      • .\/<\/span>ssl<\/span><\/code>\uff1a\u7528\u4e8e\u5bfc\u51faSSL\u7684\u8bc1\u4e66\u76ee\u5f55\uff0c\u8fd9\u4e2a\u662f\u535a\u4e3b\u81ea\u5df1\u6dfb\u52a0\u7684<\/span><\/li>\n<\/ul>\n

        \u7136\u540e\u4f7f\u7528\u547d\u4ee4 docker<\/span>-<\/span>compose up<\/span>-<\/span>d<\/span><\/code>\u542f\u52a8\u5bb9\u5668\uff0c\u7136\u540e\u8f93\u5165 http<\/span>:<\/span>\/\/your_server_ip:7001<\/span><\/code>\u8fdb\u884c\u8bbf\u95ee\uff0c\u9ed8\u8ba4\u8d26\u53f7\u5bc6\u7801\uff1aadmin<\/span>\/<\/span>123456<\/span><\/code>\uff0c\u767b\u5f55\u540e\u52a1\u5fc5\u4fee\u6539\u3002<\/p>\n

        \"20240921023808325\"<\/p>\n

        \u57fa\u672c\u4f7f\u7528<\/h3>\n

        CertD\u7684\u81ea\u52a8\u5316\u6d41\u7a0b\u5982\u4e0b\u622a\u56fe\u6240\u793a\u3002<\/p>\n

        \"20240921023809595\"<\/p>\n

        \u6211\u4eec\u9700\u8981\u5148\u5728\u6388\u6743\u7ba1\u7406<\/strong>\uff0c\u6dfb\u52a0DNS\u6388\u6743\uff0c\u76ee\u524d\u652f\u6301DNSPOD\u3001\u817e\u8baf\u3001\u963f\u91cc\u4e91\u3001\u534e\u4e3a\u4e91\u3001CloudFlare<\/strong>\u7b49\u4e3b\u6d41\u5382\u5546DNS\u63a5\u5165\u3002<\/p>\n

        \"20240921023811593\"<\/p>\n

        \n

        \u4f60\u57df\u540d\u4f7f\u7528\u7684\u54ea\u4e2a\u5382\u5546\u7684DNS\u5c31\u9009\u62e9\u54ea\u4e2a\u5382\u5546\u8fdb\u884c\u63a5\u5165\uff01<\/p>\n<\/blockquote>\n

        \u63a5\u4e0b\u6765\u6dfb\u52a0\u8bc1\u4e66\u81ea\u52a8\u5316\u6d41\u6c34\u7ebf<\/strong>\uff0c\u6839\u636e\u81ea\u5df1\u7684\u60c5\u51b5\u586b\u5199\u57df\u540d\u548c\u90ae\u7bb1\u7b49\u5fc5\u586b\u4fe1\u606f\u3002<\/p>\n

        \"20240921023813215\"<\/p>\n

          \n
        • \u57df\u540d\uff1a\u5982\u679c\u9700\u8981\u6cdb\u57df\u540d\u8bc1\u4e66\u53ef\u586b\u5199\u00a0*.<\/span>xxx<\/span>.<\/span>com<\/span><\/code>\uff0c\u56de\u8f66\u952e\u8fd8\u53ef\u4ee5\u6dfb\u52a0\u591a\u4e2a\u57df\u540d\uff0cLet’s Encrypt\u662f\u652f\u6301\u6cdb\u57df\u540d\u548c\u591a\u57df\u540d\u7684\uff0c\u524d\u63d0\u662f\u8fd9\u4e9b\u57df\u540d\u4f7f\u7528\u7684\u540c\u4e00\u5bb6DNS<\/span><\/li>\n
        • \u8bc1\u4e66\u63d0\u4f9b\u5546\uff1a\u9ed8\u8ba4\u9009\u62e9Let’s Encrypt\u5c31\u884c\u4e86<\/span><\/li>\n
        • DNS\u63d0\u4f9b\u5546\uff1a\u4f60\u57df\u540d\u7528\u7684\u54ea\u5bb6\u670d\u52a1\u5546\u5c31\u9009\u54ea\u4e2a<\/span><\/li>\n
        • \u5b9a\u65f6\u89e6\u53d1\u5efa\u8bae\u586b\u5199\uff0c\u8fd9\u6837\u540e\u671f\u53ef\u4ee5\u81ea\u52a8\u7eed\u671f\uff0c\u6bd4\u5982\u586b\u5199\uff1a\u00a00<\/span>0<\/span>4<\/span>*<\/span>*<\/span>*<\/span><\/code>\u4ee3\u8868\u6bcf\u5929\u51cc\u66684\u70b9\u68c0\u6d4b\u4e00\u6b21<\/span><\/li>\n<\/ul>\n

          \u6dfb\u52a0\u5b8c\u6bd5\u540e\uff0c\u5982\u679c\u4f60\u9700\u8981\u7acb\u5373\u7533\u8bf7SSL\u8bc1\u4e66\uff0c\u624b\u52a8\u70b9\u4e00\u4e0b\u624b\u52a8\u89e6\u53d1<\/strong>\u5c31\u884c\u4e86\uff0c\u914d\u7f6e\u6b63\u786e\u7684\u60c5\u51b5\u4e0b\uff0c\u4e00\u822c\u51e0\u5206\u949f\u5c31\u7533\u8bf7\u4e0b\u6765\u4e86\u3002<\/p>\n

          \"20240921023815383\"<\/p>\n

          \u7533\u8bf7\u5b8c\u6bd5\u540e\u70b9\u51fb\u4e0b\u8f7d\u6309\u94ae\uff0c\u53ef\u4ee5\u5c06SSL\u8bc1\u4e66\u4e0b\u8f7d\u5230\u672c\u5730\u3002<\/p>\n

          \"20240921023817110\"<\/p>\n

          \u540c\u65f6\u4f60\u8fd8\u53ef\u4ee5\u624b\u52a8\u6dfb\u52a0\u66f4\u591a\u6b65\u9aa4\uff0c\u6bd4\u5982\u5c06\u8bc1\u4e66\u81ea\u52a8\u5bfc\u51fa\uff0c\u6216\u8005\u5c06\u8bc1\u4e66\u4e0a\u4f20\u5230\u963f\u91cc\u4e91\u3001\u817e\u8baf\u4e91\u7b49\uff0c\u81ea\u52a8\u5316\u7a0b\u5ea6\u8fd8\u662f\u633a\u9ad8\u7684\uff0c\u5c31\u662f\u652f\u6301\u7684\u5382\u5546\u76ee\u524d\u8fd8\u6bd4\u8f83\u5c11\u3002<\/p>\n

          \"20240921023818495\"<\/p>\n

          \u6ce8\u610f\u4e8b\u9879<\/h3>\n

          xiaoz\u5728\u7533\u8bf7\u8fc7\u7a0b\u4e2d\uff0c\u9047\u5230\u4e86\u7533\u8bf7\u5931\u8d25\u7684\u60c5\u51b5\uff0c\u539f\u56e0\u662f\u5728\u7533\u8bf7\u4e4b\u524d\uff0c\u6211\u7684\u57df\u540dDNS\u5b58\u5728\u540d\u4e3a _acme<\/span>-<\/span>challenge<\/span><\/code>\u7684\u4e3b\u673a\u8bb0\u5f55\uff0c\u548cLet’s Encrypt\u8981\u6c42\u7684\u4e3b\u673a\u540d\u5b58\u5728\u51b2\u7a81\uff0c\u6240\u4ee5\u5728\u7533\u8bf7\u524d\u6700\u597d\u5148\u628a\u5df2\u6709\u7684 _acme<\/span>-<\/span>challenge<\/span><\/code>\u4e3b\u673a\u8bb0\u5f55\u5220\u9664\u3002<\/p>\n

          \u7ed3\u8bed<\/h3>\n

          CertD\u8f83\u4e3a\u4e13\u4e1a\uff0c\u4e0d\u592a\u9002\u5408\u65b0\u624b\u5c0f\u767d\uff0c\u4f46\u6bd4\u8f83\u9002\u5408\u8fd0\u7ef4\u548c\u5f00\u53d1\u4eba\u5458\uff0c\u5176\u81ea\u52a8\u5316\u8bc1\u4e66\u7ba1\u7406\u6d41\u7a0b\u80fd\u663e\u8457\u63d0\u9ad8\u8fd0\u7ef4\u548c\u5f00\u53d1\u4eba\u5458\u7684\u5de5\u4f5c\u6548\u7387\u3002\u5f53\u524d\uff0cCertD\u652f\u6301\u7684\u670d\u52a1\u5546\u6570\u91cf\u6709\u9650\uff0c\u671f\u5f85\u672a\u6765\u80fd\u6269\u5c55\u5230\u66f4\u591a\u5e73\u53f0\u3002\u540c\u65f6\uff0c\u4e5f\u611f\u8c22\u4f5c\u8005\u7684\u8f9b\u82e6\u4ed8\u51fa\u3002<\/p>\n

          \n

          CertD\u5f00\u6e90\u5730\u5740\uff1ahttps:\/\/github.com\/certd\/certd<\/p>\n<\/blockquote>\n

           <\/p>\n

           <\/p>\n","protected":false},"excerpt":{"rendered":"

          \u6700\u8fd1\u5404\u5bb6\u4e91\u670d\u52a1\u63d0\u4f9b\u5546\u5c06\u514d\u8d39DV SSL\u8bc1\u4e66\u6709\u6548\u671f\u4ece\u4e00\u5e74\u7f29\u77ed\u5230\u4e09\u4e2a\u6708\uff0c\u76f8\u6bd4\u4e4b\u4e0b\uff0cLet’s Encrypt\u5f88\u65e9\u5c31\u652f\u6301\u4e86\u514d\u8d39\u6cdb\u57df\u540dSSL\u8bc1\u4e66\u548c\u591a\u57df\u540dSSL\u8bc1\u4e66\uff0c\u6709\u6548\u671f\u4e5f\u662f\u4e09\u4e2a\u6708\u3002\u65e2\u7136\u540c\u6837\u662f\u4e09\u4e2a\u6708\u6709\u6548\u671f\uff0c\u660e\u663e\u9009\u62e9Let’s…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[140],"tags":[159,176,41],"topic":[343],"class_list":["post-11620","post","type-post","status-publish","format-standard","hentry","category-domain-website","tag-docker","tag-ssl","tag-41","topic-domains"],"_links":{"self":[{"href":"http:\/\/puo.cn\/index.php?rest_route=\/wp\/v2\/posts\/11620","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/puo.cn\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/puo.cn\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/puo.cn\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/puo.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=11620"}],"version-history":[{"count":1,"href":"http:\/\/puo.cn\/index.php?rest_route=\/wp\/v2\/posts\/11620\/revisions"}],"predecessor-version":[{"id":651083,"href":"http:\/\/puo.cn\/index.php?rest_route=\/wp\/v2\/posts\/11620\/revisions\/651083"}],"wp:attachment":[{"href":"http:\/\/puo.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=11620"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/puo.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=11620"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/puo.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=11620"},{"taxonomy":"topic","embeddable":true,"href":"http:\/\/puo.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftopic&post=11620"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}