{"id":3676,"date":"2025-03-25T23:00:00","date_gmt":"2025-03-25T14:00:00","guid":{"rendered":"https:\/\/jikoman.sin-cos.com\/blog\/?p=3676"},"modified":"2025-03-25T23:00:00","modified_gmt":"2025-03-25T14:00:00","slug":"vps-14","status":"publish","type":"post","link":"https:\/\/jikoman.sin-cos.com\/blog\/2025\/03\/vps-14\/","title":{"rendered":"VPS\u3067AlmaLinux (14) Web\u30b5\u30fc\u30d0\u306eSSL\u5316"},"content":{"rendered":"\n

\u524d\u56de<\/a>\u306f\u3001ACME\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3092\u884c\u3063\u305f\u3002
\u4eca\u56de\u306f\u3001Web\u30b5\u30fc\u30d0\u306eSSL\u5316\u3092\u884c\u3046\u3002<\/p>\n\n\n\n

Nginx\u306bCertbot\u306e\u8a2d\u5b9a<\/h3>\n\n\n\n

\u6b21\u306e\u30b3\u30de\u30f3\u30c9\u3067Certbot\u304c\u8a2d\u5b9a\u3057\u3066\u304f\u308c\u308b\u3002<\/p>\n\n\n\n\n\n\n\n

$ sudo certbot --nginx
Saving debug log to \/var\/log\/letsencrypt\/letsencrypt.log
Enter email address or hit Enter to skip.
 (Enter 'c' to cancel): name@your.domain                              

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Please read the Terms of Service at:
https:\/\/letsencrypt.org\/documents\/LE-SA-v1.5-February-24-2025.pdf
You must agree in order to register with the ACME server. Do you agree?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
(Y)es\/(N)o: Y

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Would you be willing, once your first certificate is successfully issued, to
share your email address with the Electronic Frontier Foundation, a founding
partner of the Let's Encrypt project and the non-profit organization that
develops Certbot? We'd like to send you email about our work encrypting the web,
EFF news, campaigns, and ways to support digital freedom.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
(Y)es\/(N)o: N
Account registered.

Which names would you like to activate HTTPS for?
We recommend selecting either all domains, or all domains in a VirtualHost\/server block.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1: sub.your.domain
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Select the appropriate numbers separated by commas and\/or spaces, or leave input
blank to select all options shown (Enter 'c' to cancel): 
Requesting a certificate for sub.your.domain

Successfully received certificate.
Certificate is saved at: \/etc\/letsencrypt\/live\/sub.your.domain\/fullchain.pem
Key is saved at:         \/etc\/letsencrypt\/live\/sub.your.domain\/privkey.pem
This certificate expires on 2025-06-20.
These files will be updated when the certificate renews.
Certbot has set up a scheduled task to automatically renew this certificate in the background.

Deploying certificate
Successfully deployed certificate for sub.your.domain to \/etc\/nginx\/nginx.conf
Congratulations! You have successfully enabled HTTPS on https:\/\/sub.your.domain

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
If you like Certbot, please consider supporting our work by:
 * Donating to ISRG \/ Let's Encrypt:   https:\/\/letsencrypt.org\/donate
 * Donating to EFF:                    https:\/\/eff.org\/donate-le
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -<\/pre>\n\n\n\n
\u5b8c\u4e86\u3057\u305f\u6642\u70b9\u3067\u3001SSL\u3067\u306eWeb\u8868\u793a\u304c\u53ef\u80fd\u306b\u306a\u3063\u3066\u3044\u308b\u3002<\/p>\n\n\n\n
\u8a3c\u660e\u66f8\u306e\u66f4\u65b0\u78ba\u8a8d<\/h3>\n\n\n\n
\u624b\u52d5\u3067\u8a3c\u660e\u66f8\u306e\u66f4\u65b0\u3092\u30c6\u30b9\u30c8\u3002<\/p>\n\n\n\n
$ sudo certbot renew --dry-run
Saving debug log to \/var\/log\/letsencrypt\/letsencrypt.log

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Processing \/etc\/letsencrypt\/renewal\/sub.your.domain.conf
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Account registered.
Simulating renewal of an existing certificate for sub.your.domain

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Congratulations, all simulated renewals succeeded: 
  \/etc\/letsencrypt\/live\/sub.your.domain\/fullchain.pem (success)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -<\/pre>\n\n\n\n
Certbot\u306e\u8a3c\u660e\u66f8\u66f4\u65b0\u306e\u305f\u3081\u306e\u30bf\u30a4\u30de\u30fc\u3092\u78ba\u8a8d\u3002<\/p>\n\n\n\n
$ systemctl list-timers *certbot*
NEXT                        LEFT          LAST                        PASSED    UNIT                     ACTIVATES                 
Sun 2025-03-23 00:57:00 JST 1h 13min left Sat 2025-03-22 23:18:13 JST 25min ago snap.certbot.renew.timer snap.certbot.renew.service

1 timers listed.
Pass --all to see loaded but inactive timers, too.<\/pre>\n\n\n\n
\u30bf\u30a4\u30de\u30fc\u306e\u8a2d\u5b9a\u3092\u78ba\u8a8d\u3002<\/p>\n\n\n\n
$ cat \/etc\/systemd\/system\/timers.target.wants\/snap.certbot.renew.timer
[Unit]
# Auto-generated, DO NOT EDIT
Description=Timer renew for snap application certbot.renew
Requires=var-lib-snapd-snap-certbot-4482.mount
After=var-lib-snapd-snap-certbot-4482.mount
X-Snappy=yes

[Timer]
Unit=snap.certbot.renew.service
OnCalendar=*-*-* 00:57
OnCalendar=*-*-* 23:18

[Install]
WantedBy=timers.target<\/pre>\n\n\n\n
\u6b21\u56de<\/a>\u306f\u3001WordPress\u3092\u5c0e\u5165\u3059\u308b\u3002<\/p>\n\n\n\n
\u304a\u53cb\u9054\u7d39\u4ecb\u30d7\u30ed\u30b0\u30e9\u30e0\u3092\u5229\u7528\u3057\u3066\u5951\u7d04\u3059\u308b\u306810%OFF\u306b\u306a\u308b\u305d\u3046\u306a\u306e\u3067\u3001
\u3082\u3057\u3088\u308d\u3057\u3051\u308c\u3070\u6b21\u306e\u753b\u50cf\u3092\u30af\u30ea\u30c3\u30af\u3057\u3066\u307f\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n
\u6295\u7a3f\u4e00\u89a7\u306f\u3053\u3061\u3089\u2192\u300cVPS\u3067AlmaLinux<\/a>\u300d<\/p>\n","protected":false},"excerpt":{"rendered":"
Web\u30b5\u30fc\u30d0\u306e\u30c7\u30a3\u30ec\u30c3\u30af\u30c8\u30ea\u69cb\u6210\u5909\u66f4<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[129],"tags":[9,43,50],"class_list":["post-3676","post","type-post","status-publish","format-standard","hentry","category-pc","tag-almalinux","tag-vps","tag-xserver"],"_links":{"self":[{"href":"https:\/\/jikoman.sin-cos.com\/blog\/wp-json\/wp\/v2\/posts\/3676","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jikoman.sin-cos.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jikoman.sin-cos.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jikoman.sin-cos.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/jikoman.sin-cos.com\/blog\/wp-json\/wp\/v2\/comments?post=3676"}],"version-history":[{"count":0,"href":"https:\/\/jikoman.sin-cos.com\/blog\/wp-json\/wp\/v2\/posts\/3676\/revisions"}],"wp:attachment":[{"href":"https:\/\/jikoman.sin-cos.com\/blog\/wp-json\/wp\/v2\/media?parent=3676"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jikoman.sin-cos.com\/blog\/wp-json\/wp\/v2\/categories?post=3676"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jikoman.sin-cos.com\/blog\/wp-json\/wp\/v2\/tags?post=3676"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}