RRRosmontis
359c1c6ead
- conf/haproxy: 18443 TLS终结+SNI选证+首字节嗅探，RTMPS→1935，HTTP→8445 - conf/nginx: 8445 明文口承载 tsk 双域名 /live/ 与 /danmaku - conf/certs: pem 构建脚本（接入 acme.sh 续期钩子） - run.sh: 修正为当前部署相对路径 - srs.conf: http_hooks 恢复并指向 api.rrrosmontis.icu (bj live_monitor) - DEPLOYMENT.md: 完整部署记忆（架构/证书/通知链路/重建步骤/已知坑）
13 lines
509 B
Bash
Executable File
13 lines
509 B
Bash
Executable File
#!/bin/bash
|
||
# 重建 HAProxy 用的 pem（cert+key 合一），由 acme.sh 续期钩子调用
|
||
set -e
|
||
mkdir -p /etc/haproxy/certs
|
||
cat /etc/nginx/cert/tsk.aeolianchi.me/fullchain.pem \
|
||
/etc/nginx/cert/tsk.aeolianchi.me/privkey.pem \
|
||
> /etc/haproxy/certs/tsk.aeolianchi.me.pem
|
||
cat /home/server/cert/extra/rrrosmontis.icu/fullchain.pem \
|
||
/home/server/cert/extra/rrrosmontis.icu/key.pem \
|
||
> /etc/haproxy/certs/tsk.rrrosmontis.icu.pem
|
||
chmod 600 /etc/haproxy/certs/*.pem
|
||
echo "pems rebuilt: $(date)"
|