服务器

rsync -arzvH -e 'ssh -p9' root@192.168.1.12:/root/sh-1.5.5/nginx-1.12.2 /root/sh-1.4.1
./certbot-auto certificates
./certbot-auto delete --cert-name excel.com
s=`df | sed -n '/\/$/p' | gawk '{print $4}'|sed 's/%//'`
if [ $s -ge 10 ]
then
echo "$s% userd" | mail -s "Disk warning" ley
fi

nginx 升级
./configure --user=www --group=www --prefix=/alidata/server/nginx --with-http_stub_status_module --with-http_ssl_module --with-http_gzip_static_module --with-http_v2_module --with-openssl=../openssl-1.0.2e --add-module=../ngx_cache_purge-2.3
mv /alidata/server/nginx/sbin/nginx /alidata/server/nginx/sbin/nginx2.old 备份老版程序 mv 老版本的可执行程序
cp /root/sh-1.4.1/nginx-1.12.2/objs/nginx /alidata/server/nginx/sbin/
cp /root/sh-1.4.1/nginx-1.4.4/objs/nginx /alidata/server/nginx/sbin/

make upgrade 平滑升级

find ./ -name "*.jpg" | xargs grep '$_POST'

certbot

./certbot-auto --server https://acme-v02.api.letsencrypt.org/directory -d *.excel.com --manual --preferred-challenges dns-01 certonly
certbot certonly --preferred-challenges dns --manual -d *..cn --server https://acme-v02.api.letsencrypt.org/directory --register-unsafely-without-email
TXT记录是否生效再按下一步
dig -t txt _acme-challenge.excel.com @8.8.8.8
/etc/letsencrypt/live/excel.com/fullchain.pem
nginx -s reload
acme.sh --cron // -f