# letsencrypt-dnspod

**Repository Path**: x8x48/letsencrypt-dnspod

## Basic Information

- **Project Name**: letsencrypt-dnspod
- **Description**: Let’s Encrypt使用dnspod进行验证
- **Primary Language**: Shell
- **License**: MIT
- **Default Branch**: master
- **Homepage**: None
- **GVP Project**: No

## Statistics

- **Stars**: 1
- **Forks**: 0
- **Created**: 2020-02-03
- **Last Updated**: 2023-02-12

## Categories & Tags

**Categories**: Uncategorized

**Tags**: None

## README

# letsencrypt-dnspod
Let’s Encrypt使用dnspod进行验证

## 开始工作
```
 cp config.example.sh config.sh
 cp domains.example.txt domains.txt
```

编辑domains.txt，填入token、domain以及record

运行letsencrypt-dnspod.sh即可

config.sh不用修改亦可正常使用，如有需求请自行对应修改。

建议将此脚本放入计划任务

## 关于DNSPOD
token的设置在：DNSPOD -> 用户中心 -> 安全设置 -> API Token

快捷链接：https://www.dnspod.cn/console/user/security

## 按时更新

每月一次

```
echo '*/1 1 1 * * root /bin/bash /opt/letsencrypt/letsencrypt-dnspod.sh >>/var/log/letsencrypt.log 2>&1' > /etc/cron.d/letsencrypt
```

## 使用

### Nginx

```
server {
	server_name www.example.com;

	rewrite ^ https://$server_name$request_uri? permanent;
}

server {
	listen 443;
	server_name www.example.com;

	ssl on;
	ssl_certificate /opt/letsencrypt/certs/example.com/fullchain.pem;
	ssl_certificate_key /opt/letsencrypt/certs/example.com/privkey.pem;
	ssl_session_timeout 5m;
	ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
	ssl_ciphers ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA;
	ssl_session_cache shared:SSL:50m;
#	ssl_dhparam /tmp/server.dhparam;
	ssl_prefer_server_ciphers on;

#	location / {
#		proxy_pass  http://127.0.0.1:3000;
#		proxy_redirect     off;
#		proxy_set_header   Host             $host;
#		proxy_set_header   X-Real-IP        $remote_addr;
#		proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
#	}
}
```