0908

nginx/updateConfig.sh

@@ -24,19 +24,25 @@ for conf in conf.d/*.conf; do
     sudo cp "$conf" /etc/nginx/conf.d/
 done
 
-# HTTPS 配置：只有证书已就绪的域名才启用，避免 nginx 因证书缺失拒绝启动
+# HTTPS 配置：证书就绪后才启用，避免 nginx 因证书缺失拒绝启动
+# 5 个域名共用一张 SAN 证书，统一放在 CERT_NAME 目录下
+CERT_NAME="${CERT_NAME:-stonelan.cn}"
+CERT_FULL="/etc/letsencrypt/live/$CERT_NAME/fullchain.pem"
 DOMAINS="${DOMAINS:-fastgpt.stonelan.cn gitea.stonelan.cn image.stonelan.cn registry.stonelan.cn www.stonelan.cn}"
-for d in $DOMAINS; do
-    src="ssl.d.available/$d.conf"
-    [ -f "$src" ] || { echo "跳过 $d：缺少 $src"; continue; }
 
-    if [ -f "/etc/letsencrypt/live/$d/fullchain.pem" ]; then
-        sudo cp "$src" "/etc/nginx/ssl.d/$d.conf"
-        echo "已启用 $d"
-    else
-        echo "跳过 $d：证书尚未生成"
-    fi
-done
+if [ -f "$CERT_FULL" ]; then
+    for d in $DOMAINS; do
+        src="ssl.d.available/$d.conf"
+        if [ -f "$src" ]; then
+            sudo cp "$src" "/etc/nginx/ssl.d/$d.conf"
+            echo "已启用 $d"
+        else
+            echo "跳过 $d：缺少 $src"
+        fi
+    done
+else
+    echo "证书尚未生成（$CERT_FULL），跳过 HTTPS 配置"
+fi
 
 # 测试并重载配置
 if sudo nginx -t; then