1、安装Let’s Encrypt证书

git clone https://github.com/letsencrypt/letsencrypt
cd letsencrypt
./letsencrypt-auto certonly --standalone --email 邮箱地址 -d 网站域名

2、配置 Nginx 加入证书

编辑配置文件nginx.conf

server
{
listen 80 default_server;
server_name 网站域名;
if ($scheme = http ) {
return 301 https://$host$request_uri;
}
}

server
{
listen 443 ssl http2;
server_name 网站域名;

ssl_certificate /etc/letsencrypt/live/网站域名/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/网站域名/privkey.pem;

3、重启LNMP

lnmp restart

注意:WordPress下还需进入后台,设置,常规选项里重新设置下WordPress地址(URL)和站点地址(URL)——把http://修改为https://