From cc43c75dda87e0c5374289273dcc374eafb9e7c4 Mon Sep 17 00:00:00 2001 From: gitadmin Date: Thu, 9 Jul 2026 16:01:49 +0800 Subject: [PATCH] =?UTF-8?q?fix:=20=E7=BB=9F=E4=B8=80=E6=89=80=E6=9C=89?= =?UTF-8?q?=E7=AB=99=E7=82=B9=E4=BD=BF=E7=94=A8=20Let's=20Encrypt=20?= =?UTF-8?q?=E8=AF=81=E4=B9=A6=EF=BC=8C=E4=BF=AE=E5=A4=8D=20SSL=20=E4=B8=8D?= =?UTF-8?q?=E5=AE=89=E5=85=A8=E6=8F=90=E7=A4=BA?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - www-ai/root-domain/assets/issue/git 从 oa.tlyq.ai（CloudFlare Origin 自签名） 改为 www.tlyq.ai（Let's Encrypt 公共信任证书） - oa.tlyq.ai 的 CloudFlare Origin 证书仅用于 oa-ai.conf --- conf.d/assets-ai.conf | 4 ++-- conf.d/git-ai.conf | 4 ++-- conf.d/issue-ai.conf | 4 ++-- conf.d/root-domain.conf | 4 ++-- conf.d/www-ai.conf | 4 ++-- 5 files changed, 10 insertions(+), 10 deletions(-) diff --git a/conf.d/assets-ai.conf b/conf.d/assets-ai.conf index 448c59e..1ff17d5 100644 --- a/conf.d/assets-ai.conf +++ b/conf.d/assets-ai.conf @@ -2,8 +2,8 @@ server { listen 443 ssl; server_name assets.tlyq.ai; - ssl_certificate /etc/letsencrypt/live/oa.tlyq.ai/fullchain.pem; - ssl_certificate_key /etc/letsencrypt/live/oa.tlyq.ai/privkey.pem; + ssl_certificate /etc/letsencrypt/live/www.tlyq.ai/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/www.tlyq.ai/privkey.pem; location /_next/static/ { proxy_pass http://assets-ai:3000; diff --git a/conf.d/git-ai.conf b/conf.d/git-ai.conf index 7dc047d..7b373fe 100644 --- a/conf.d/git-ai.conf +++ b/conf.d/git-ai.conf @@ -2,8 +2,8 @@ server { listen 443 ssl; server_name git.tlyq.ai; - ssl_certificate /etc/letsencrypt/live/oa.tlyq.ai/fullchain.pem; - ssl_certificate_key /etc/letsencrypt/live/oa.tlyq.ai/privkey.pem; + ssl_certificate /etc/letsencrypt/live/www.tlyq.ai/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/www.tlyq.ai/privkey.pem; # Gitea 通过 OIDC 认证，不走 auth_request，只需基本反向代理 location / { diff --git a/conf.d/issue-ai.conf b/conf.d/issue-ai.conf index e2c9023..cee276b 100644 --- a/conf.d/issue-ai.conf +++ b/conf.d/issue-ai.conf @@ -2,8 +2,8 @@ server { listen 443 ssl; server_name issue.tlyq.ai; - ssl_certificate /etc/letsencrypt/live/oa.tlyq.ai/fullchain.pem; - ssl_certificate_key /etc/letsencrypt/live/oa.tlyq.ai/privkey.pem; + ssl_certificate /etc/letsencrypt/live/www.tlyq.ai/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/www.tlyq.ai/privkey.pem; location /_next/static/ { proxy_pass http://issue-ai:3000; diff --git a/conf.d/root-domain.conf b/conf.d/root-domain.conf index 545b7f9..4e836fe 100644 --- a/conf.d/root-domain.conf +++ b/conf.d/root-domain.conf @@ -5,8 +5,8 @@ server { server_name tlyq.ai; # 共用现有证书 - ssl_certificate /etc/letsencrypt/live/oa.tlyq.ai/fullchain.pem; - ssl_certificate_key /etc/letsencrypt/live/oa.tlyq.ai/privkey.pem; + ssl_certificate /etc/letsencrypt/live/www.tlyq.ai/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/www.tlyq.ai/privkey.pem; return 301 https://www.tlyq.ai$request_uri; } diff --git a/conf.d/www-ai.conf b/conf.d/www-ai.conf index c7878d8..16d8aa9 100644 --- a/conf.d/www-ai.conf +++ b/conf.d/www-ai.conf @@ -2,8 +2,8 @@ server { listen 443 ssl; server_name www.tlyq.ai; - ssl_certificate /etc/letsencrypt/live/oa.tlyq.ai/fullchain.pem; - ssl_certificate_key /etc/letsencrypt/live/oa.tlyq.ai/privkey.pem; + ssl_certificate /etc/letsencrypt/live/www.tlyq.ai/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/www.tlyq.ai/privkey.pem; location /_next/static/ { resolver 127.0.0.11 valid=30s;