acme

curl https://get.acme.sh | sh -s email=my@example.com

acme.sh --set-default-ca --server letsencrypt

echo 'SAVED_Ali_Key="xxx"' >> ~/.acme.sh/account.conf
echo 'SAVED_Ali_Secret="xxxx"' >> ~/.acme.sh/account.conf

acme.sh --issue --dns dns_ali -d *.starneko.top -d starneko.top

acme.sh --install-cert -d *.starneko.top \
--key-file       /opt/dev/nginx/ssl/starneko/key.pem  \
--fullchain-file /opt/dev/nginx/ssl/starneko/cert.pem \
--reloadcmd     "bash /opt/dev/nginx/ssl/realod_starneko_ssl.sh"