问配置问题:使用LetsCncrypt的多域自动SSL使用OpenResty &Lua-R校- auto

EN

https://customer1.myapp.com
https://customer2.myapp.com
https://customer1.com (customer sets up A/CNAME recoreds at his DNS provider)

#user nginx;

error_log  /usr/local/openresty/nginx/logs/error.log warn;

events {
    worker_connections 1024;
}

http {

  lua_shared_dict auto_ssl 1m;
  lua_shared_dict auto_ssl_settings 64k;

  init_by_lua_block {

    auto_ssl = (require "resty.auto-ssl").new()
    auto_ssl:set("allow_domain", function(domain)
      return true
    end)
    auto_ssl:set("dir", "/etc/resty-auto-ssl")
    auto_ssl:init()

  }

  init_worker_by_lua_block {
    auto_ssl:init_worker()
  }

 # access_log /usr/local/openresty/nginx/logs/access.log main;

  server {

      listen 443 ssl;

      ssl_certificate_by_lua_block {
        auto_ssl:ssl_certificate()
      }

      ssl_certificate /etc/ssl/resty-auto-ssl-fallback.crt;
      ssl_certificate_key /etc/ssl/resty-auto-ssl-fallback.key;

      root /var/www/myapp.com/public;
      index index.php index.html index.htm;

      location / {

        try_files $uri $uri/ /index.php?$query_string; 

      }

#     location ~ \.php$ {
#       include snippets/fastcgi-php.conf;
#       fastcgi_pass unix:/run/php/php7.4-fpm.sock;
#       fastcgi_read_timeout 600;
#     }

      location ~ /\.ht {
        deny all;
      }

  }

  server {

    listen 80;
    server_name *.myapp.com myapp.com;

    location /.well-known/acme-challenge/ {
        content_by_lua_block {
          auto_ssl:challenge_server()
        }
    }

    location / {
      return 301 https://myapp.com$request_uri;
    }

  }

  server {

    listen 8999;

    location / {
        content_by_lua_block {
          auto_ssl:hook_server()
        }
    }

  }

}

- Trying to mention user in 1st line of config files gives me error.
- So i commented it out and tried to caryy on anyways

- keep getting following error in my log:  `lets_encrypt.lua:40: issue_cert(): auto-ssl: dehydrated failed: env HOOK_SECRET=XXXX HOOK_SERVER_PORT=8999 /usr/local/openresty/luajit/bin/resty-auto-ssl/dehydrated --cron --accept-terms --no-lock --domain myapp.com --challenge http-01 --config /etc/resty-auto-ssl/letsencrypt/config --hook /usr/local/openresty/luajit/bin/resty-auto-ssl/letsencrypt_hooks status: 256 out: # INFO: Using main config file /etc/resty-auto-ssl/letsencrypt/config`
- But it still goes on & does create a certificate after which it gives random number generator error.
- Sometimes, if I delete everything inside `/etc/resty-auto-ssl` - it dosent give me such errors.

- I keep getting following error in my log:  `Can't load ./.rnd into RNG random number generator:RAND_load_file:Cannot open file:../crypto/rand/randfile.c:98:Filename=./.rnd curl: (22) The requested URL returned error: 500 Internal Server Error`

- I have properly installed php-fpm and have tested it when using nginx standalone.
- But, now that I am using nginx provided with openresty, it dosent seem to work
- Error (Shown when tested config using: nginx -t command):  `"/usr/local/openresty/nginx/conf/snippets/fastcgi-php.conf" failed (2: No such file or directory)`

- Sometimes this error is followed by error in above point number 2:

- ... where x.x.x.x is A recored for customer1.com whch was opened from browser

- This covers all my subdomain and I won't have to deal with limits on subdomain by letsencrypt.
- This way I only have to use lets encrypt for custom domains like customer1.com

- Redirect [http://myapp.com](http://myapp.com/) & [http://www.myapp.com](http://www.myapp.com/) to -> [https://myapp.com](https://myapp.com/)
- Redirect [https://www.myapp.com](https://www.myapp.com/) to -> [https://myapp.com](https://myapp.com/)
- Redirect [http://customer1.com](http://customer1.com/) & [http://www.customer1.com](http://www.customer1.com/) to -> [https://customer1.com](https://customer1.com/)
- And then on my acutal ssl server block - write all logic for auto ssl generation