顶级国际域名证书怎么弄

# 下载证书文件
wget https://your-ca-provider.com/your-domain.crt
wget https://your-ca-provider.com/your-domain.key

# 编辑Nginx配置文件
sudo nano /etc/nginx/sites-available/your-domain.conf

# 添加以下内容
server {
    listen 80;
    server_name your-domain.com;
    return 301 https://$host$request_uri;
}

server {
    listen 443 ssl;
    server_name your-domain.com;

    ssl_certificate /path/to/your-domain.crt;
    ssl_certificate_key /path/to/your-domain.key;

    location / {
        root /var/www/your-domain;
        index index.html index.htm;
    }
}

# 启用配置
sudo ln -s /etc/nginx/sites-available/your-domain.conf /etc/nginx/sites-enabled/

# 测试配置
sudo nginx -t

# 重启Nginx
sudo systemctl restart nginx