2023/10/27

透過CertBot取得AliCloud SSL憑證

要先去AliCloud申請AliyunDNSFullAccess權限


sudo apt update -y
sudo apt install snapd -y
sudo snap install core; sudo snap refresh core
sudo snap install --classic certbot
sudo ln -s /snap/bin/certbot /usr/bin/certbot
sudo snap install certbot-dns-aliyun
sudo snap set certbot trust-plugin-with-root=ok
sudo snap connect certbot:plugin certbot-dns-aliyun

# 將AliCloud DNS API and Secret 寫入到alicloud.ini
sudo echo "dns_aliyun_access_key = apikey" > /etc/letsencrypt/alicloud.ini
sudo echo "dns_aliyun_access_key_secret = secret" >> /etc/letsencrypt/alicloud.ini

sudo chmod 600 /etc/letsencrypt/alicloud.ini
sudo certbot certonly --authenticator=dns-aliyun --dns-aliyun-credentials='/etc/letsencrypt/alicloud.ini' -d "domain"

參考資料:
https://github.com/tengattack/certbot-dns-aliyun