ssl - Certbot 自动配置后站点未启用 ssl

Question

我们有一个静态站点代码并希望在其上启用 ssl。该服务器还运行着其他几个静态站点。这是我的配置

server {
  root /home/ubuntu/projects/example-beta/dist;
  index index.html index.htm index.nginx-debian.html;

  server_name  beta.example.com;

  location / {
    try_files $uri $uri/ =404;  
  }

    listen 443 ssl; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/beta.example.com/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/beta.example.com/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot


}
server {
    if ($host = beta.example.com) {
        return 301 https://$host$request_uri;
    } # managed by Certbot



  server_name  beta.example.com;


    listen 80;
    return 404; # managed by Certbot


}

但它不选择 ssl。我用 example 替换了实际的域名。几天来我一直在尝试不同的解决方案。对不起，我是 devOps 的新手。非常感谢任何解决方法或帮助

编辑

当前配置

server {
  root /home/ubuntu/projects/savepakistan-beta/dist;
  index index.html index.htm index.nginx-debian.html;

  server_name  beta.wesavepakistan.com;

  location / {
    try_files $uri $uri/ =404;  
  }

  listen 443 ssl; # managed by Certbot
  ssl_certificate /etc/letsencrypt/live/beta.wesavepakistan.com/fullchain.pem; # managed by Certbot
  ssl_certificate_key /etc/letsencrypt/live/beta.wesavepakistan.com/privkey.pem; # managed by Certbot
  include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
  ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}

server {
  listen 80 default_server;
  listen [::]:80 default_server;
  server_name beta.wesavepakistan.com;
  return 301 https://$host$request_uri;
}

Answer 1

我假设第二个服务器 block 是为了将所有 HTTP 请求重定向到 HTTPS，我将用以下内容替换此 block :

server {
    listen 80 default_server;
    listen [::]:80 default_server;
    server_name beta.example.com;
    return 301 https://$host$request_uri;
}

为了解决 SSL 问题，我会这样做:

• 确保您的证书是使用主机名创建的:beta.example.com
• 从 location block 中移出所有 ssl 指令(listen 443 ssl; ssl_certificate ...; etc)并将它们放在 server 阻止。