免费CA认证详细流程

    server {
        listen 80;
        listen [::]:80;
        server_name  www.domain.com domain.com;
        return 301 https://$server_name$request_uri;
    }
    # HTTPS服务器
    server {
        listen 443 ssl;
        listen [::]:443 ssl;
        server_name www.domain.com  domain.com;
        
         # 网站根目录
        root /usr/share/nginx/domain;
        index index.html index.htm;
        
        # SSL
        ssl_session_cache shared:SSL:1m;
        ssl_session_timeout 10m;
        ssl_ciphers PROFILE=SYSTEM;
	    ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
        ssl_prefer_server_ciphers on;
        proxy_ssl_server_name on;
        
	    location / {
	    }
	    
        error_page 404 /404.html;
            location = /40x.html {
        }
        
        error_page 500 502 503 504 /50x.html;
            location = /50x.html {
        }
    }

   nginx -t
   nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
   nginx: configuration file /etc/nginx/nginx.conf **test is successful

   systemctl reload nginx

   yum install certbot

   certbot --nginx