refactor: 移除冗余BARE变量,直接使用BARE_DOMAIN
Agent-Logs-Url: https://github.com/qinfendebingshuo/guanghulab/sessions/80e337de-dabe-4e86-a711-62d4c47762ec Co-authored-by: qinfendebingshuo <207279273+qinfendebingshuo@users.noreply.github.com>
This commit is contained in:
parent
6de783ad4f
commit
46166a3bb4
|
|
@ -207,12 +207,11 @@ jobs:
|
||||||
# ─── SSL自动注入: 检测已有Let's Encrypt证书 ───
|
# ─── SSL自动注入: 检测已有Let's Encrypt证书 ───
|
||||||
# 如果之前运行过 setup-ssl,证书文件会存在
|
# 如果之前运行过 setup-ssl,证书文件会存在
|
||||||
# 每次deploy都重新注入SSL配置,避免模板覆盖导致SSL丢失
|
# 每次deploy都重新注入SSL配置,避免模板覆盖导致SSL丢失
|
||||||
BARE="${BARE_DOMAIN}"
|
if [ -d "/etc/letsencrypt/live/${BARE_DOMAIN}" ] && [ -f "/etc/letsencrypt/live/${BARE_DOMAIN}/fullchain.pem" ]; then
|
||||||
if [ -d "/etc/letsencrypt/live/\${BARE}" ] && [ -f "/etc/letsencrypt/live/\${BARE}/fullchain.pem" ]; then
|
|
||||||
echo ""
|
echo ""
|
||||||
echo "§2.5 🔐 检测到SSL证书,注入HTTPS配置..."
|
echo "§2.5 🔐 检测到SSL证书,注入HTTPS配置..."
|
||||||
# 在 listen 80 后添加 listen 443 ssl 和证书配置
|
# 在 listen 80 后添加 listen 443 ssl 和证书配置
|
||||||
sudo sed -i '/listen 80 default_server;/a\\n listen 443 ssl default_server;\n ssl_certificate /etc/letsencrypt/live/'"\${BARE}"'/fullchain.pem;\n ssl_certificate_key /etc/letsencrypt/live/'"\${BARE}"'/privkey.pem;\n include /etc/letsencrypt/options-ssl-nginx.conf;\n ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;' \
|
sudo sed -i '/listen 80 default_server;/a\\n listen 443 ssl default_server;\n ssl_certificate /etc/letsencrypt/live/'"${BARE_DOMAIN}"'/fullchain.pem;\n ssl_certificate_key /etc/letsencrypt/live/'"${BARE_DOMAIN}"'/privkey.pem;\n include /etc/letsencrypt/options-ssl-nginx.conf;\n ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;' \
|
||||||
/etc/nginx/sites-available/cn-domain.conf
|
/etc/nginx/sites-available/cn-domain.conf
|
||||||
echo "✅ SSL配置已注入 · HTTPS已启用"
|
echo "✅ SSL配置已注入 · HTTPS已启用"
|
||||||
else
|
else
|
||||||
|
|
|
||||||
Loading…
Reference in New Issue