1
# 如果你是是公共库可省略
2
# 使用 www-data 用户生成 sshkey. 这个key是用来为Github.com配置使用, 用来拉取私有库
3
# 启用www-data用户
4
sudo chsh -s /bin/bash www-data
5

6
# 安装 git
7
sudo apt update && sudo apt install git
8

9
# 安装hugo(记得下载exntended版本)
10
wget https://github.com/gohugoio/hugo/releases/download/v0.111.3/hugo_extended_0.111.3_linux-amd64.tar.gz
11
tar zxf hugo_extended_0.111.3_linux-amd64.tar.gz && sudo mv hugo /usr/local/bin
12

13
# 拉取Github上自己的hugo项目
14
sudo mkdir -p  /var/www && \
15
  sudo chown -R www-data:www-data /var/www && \
16
  sudo su www-data && ssh-keygen
17

18
# 使用www-data用户
19
cd /var/www && \
20
  git clone '私有项目地址' && \
21
  git submodule update --init

1
sudo apt-get -y install --no-install-recommends wget gnupg ca-certificates
2
wget -O - https://openresty.org/package/pubkey.gpg | sudo gpg --dearmor -o /usr/share/keyrings/openresty.gpg
3
echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/openresty.gpg] http://openresty.org/package/ubuntu $(lsb_release -sc) main" | sudo tee /etc/apt/sources.list.d/openresty.list > /dev/null
4
sudo apt update && sudo apt install -y openresty && sudo systemctl enable openresty

1
sudo apt install -y luarocks
2
sudo luarocks install lua-resty-auto-ssl
3
sudo mkdir /etc/resty-auto-ssl
4
sudo chown www-data /etc/resty-auto-ssl

1
# 必须定义一个静态的ssl_certificate文件，以便nginx能够启动。你可以用以下方法生成一个自签名的后备文件：
2
sudo openssl req -new -newkey rsa:2048 -days 3650 -nodes -x509 \
3
   -subj '/CN=sni-support-required-for-valid-ssl' \
4
   -keyout /etc/ssl/resty-auto-ssl-fallback.key \
5
   -out /etc/ssl/resty-auto-ssl-fallback.crt
6

7
sudo chown www-data:www-data /etc/ssl/resty-auto-ssl-fallback.key /etc/ssl/resty-auto-ssl-fallback.crt
8
sudo mkdir -p /etc/openresty/ssl /etc/openresty/log
9

10
# nginx用户: 系统默认: www-data
11
sudo touch /var/run/nginx.pid && sudo chown -R www-data:www-data /var/run/nginx.pid
12
sudo chown -R www-data:www-data /etc/openresty
13

14
sudo tee  /etc/openresty/nginx.conf <<- 'EOF'
15
user  www-data;
16
# 开始部署时可以将日志等级调低些
17
error_log  /etc/openresty/log/error.log  error;
18
worker_processes  4;
19
#pid        /var/run/nginx.pid;
20
events {
21
    worker_connections  1024;
22
}
23
http {
24
    include       mime.types;
25
    default_type  application/octet-stream;
26
    sendfile        on;
27
    keepalive_timeout  65;
28

29
    resolver 8.8.8.8 ipv6=off;
30

31
    lua_shared_dict auto_ssl 1m;
32
    lua_shared_dict auto_ssl_settings 64k;
33
    init_by_lua_block {
34
        auto_ssl = (require "resty.auto-ssl").new()
35
        auto_ssl:set("dir", "/etc/openresty/ssl")
36
        auto_ssl:set("allow_domain", function(domain)
37
          return true
38
        end)
39
        auto_ssl:init()
40
    }
41

42
    init_worker_by_lua_block {
43
        auto_ssl:init_worker()
44
    }
45

46
    server {
47
        listen 443 ssl;
48
        # 配置为自己的域名
49
        server_name ihsiao.com www.ihsiao.com;
50
        ssl_certificate_by_lua_block {
51
          auto_ssl:ssl_certificate()
52
        }
53

54
        ssl_certificate /etc/ssl/resty-auto-ssl-fallback.crt;
55
        ssl_certificate_key /etc/ssl/resty-auto-ssl-fallback.key;
56

57
        location / {
58
            root /var/www/ihsiao.com/public;
59
            index index.html index.htm index.nginx-debian.html;
60
        }
61

62
        # github.com hook调用点
63
        location /hook {
64
            content_by_lua_block {
65
                os.execute("/usr/local/bin/github.hook.sh")
66
            }
67
        }
68
    }
69

70
    server {
71
        listen 80;
72

73
        # 用于用Let's Encrypt执行域验证的端点。
74
        location /.well-known/acme-challenge/ {
75
          content_by_lua_block {
76
            auto_ssl:challenge_server()
77
          }
78
        }
79
    }
80

81
    # 运行在8999端口的内部服务器，用于处理证书任务。
82
    server {
83
        listen 127.0.0.1:8999;
84

85
        # 增加主体缓冲区的大小，以确保内部POST总是能够解析完整的POST内容到内存中。
86
        client_body_buffer_size 50M;
87
        client_max_body_size 50M;
88

89
        location / {
90
          content_by_lua_block {
91
            auto_ssl:hook_server()
92
          }
93
        }
94
    }
95
}
96
EOF