{"id":20,"date":"2026-02-04T01:03:43","date_gmt":"2026-02-03T17:03:43","guid":{"rendered":"https:\/\/blog.shufue.top\/?p=20"},"modified":"2026-02-04T01:03:43","modified_gmt":"2026-02-03T17:03:43","slug":"certbot%e7%94%b3%e8%af%b7cloudflare%e8%af%81%e4%b9%a6%e5%b9%b6%e8%87%aa%e5%8a%a8%e7%bb%ad%e7%ad%be","status":"publish","type":"post","link":"https:\/\/blog.shufue.top\/?p=20","title":{"rendered":"Certbot\u7533\u8bf7cloudflare\u8bc1\u4e66\u5e76\u81ea\u52a8\u7eed\u7b7e"},"content":{"rendered":"\n

\u5b89\u88c5certbot\u548c\u63d2\u4ef6<\/h1>\n\n\n\n
apt update \napt upgrade \napt install certbot python3-certbot-dns-cloudflare<\/code><\/pre>\n\n\n\n
\u914d\u7f6eCloudflare API\u5bc6\u94a5<\/h1>\n\n\n\n
    \n
  1. \u767b\u5f55\u5230\u00a0Cloudflare \u63a7\u5236\u53f0<\/a>\u3002<\/li>\n\n\n\n
  2. \u8fdb\u5165\u00a0API Tokens\u00a0\u9875\u9762\uff1a\n
      \n
    • \u70b9\u51fb\u53f3\u4e0a\u89d2\u7684\u7528\u6237\u56fe\u6807 ->\u00a0My Profile\u00a0->\u00a0API Tokens\u3002<\/li>\n\n\n\n
    • \u70b9\u51fb\u00a0Create Token\u00a0\u521b\u5efa\u4e00\u4e2a\u65b0\u5bc6\u94a5\u3002<\/li>\n<\/ul>\n<\/li>\n\n\n\n
    • \u521b\u5efa\u4e00\u4e2a\u00a0\u81ea\u5b9a\u4e49 Token\uff0c\u4e3a\u5b83\u8bbe\u7f6e\u9002\u5f53\u7684\u6743\u9650\uff1a\n
        \n
      • \u9009\u62e9\u00a0Zone.Zone\u3001Zone.DNS\u00a0\u6743\u9650\uff0c\u8fd9\u6837 Certbot \u53ef\u4ee5\u7ba1\u7406 DNS \u8bb0\u5f55\u3002<\/li>\n\n\n\n
      • \u8bbe\u7f6e\u4e3a\u00a0\u201cEdit\u201d\u00a0\u6743\u9650\u3002<\/li>\n<\/ul>\n<\/li>\n\n\n\n
      • \u751f\u6210 API Token \u540e\uff0c\u8bb0\u4e0b\u00a0Token\uff0c\u8fd9\u5c06\u5728\u914d\u7f6e Certbot \u65f6\u7528\u5230\u3002<\/li>\n<\/ol>\n\n\n\n
        \u7f16\u8f91\u914d\u7f6e\u6587\u4ef6<\/p>\n\n\n\n
        vim \/etc\/letsencrypt\/cloudflare.ini<\/code><\/pre>\n\n\n\n
        # Cloudflare API token used by Certbot\ndns_cloudflare_api_token = 0123456789abcdef0123456789abcdef01234567\n<\/code><\/pre>\n\n\n\n
        \u66f4\u6539\u6743\u9650\u4e3a\u53ea\u8bfb<\/p>\n\n\n\n
        chmod 600 \/etc\/letsencrypt\/cloudflare.ini<\/code><\/pre>\n\n\n\n
        \u7533\u8bf7\u8bc1\u4e66<\/h1>\n\n\n\n
        sudo certbot certonly \\\n --dns-cloudflare \\\n --dns-cloudflare-credentials \/etc\/letsencrypt\/cloudflare.ini \\\n --key-type ecdsa \\\n -d \"shufue.top,*.shufue.top\"<\/code><\/pre>\n\n\n\n
        \u914d\u7f6e\u81ea\u52a8\u7eed\u7b7e<\/h1>\n\n\n\n
        Certbot\u4f1a\u9ed8\u8ba4\u5b89\u88c5\u8bc1\u4e66\u65f6\u521b\u5efa\u4e00\u4e2a\u81ea\u52a8\u7eed\u7b7e\u4efb\u52a1\uff0c\u4f46\u6211\u4eec\u53ef\u4ee5\u624b\u52a8\u786e\u8ba4\u6216\u8005\u8bbe\u7f6e\u7eed\u7b7e\u4efb\u52a1\u3002<\/p>\n\n\n\n
        \u6d4b\u8bd5\u81ea\u52a8\u7eed\u7b7e<\/h2>\n\n\n\n
        certbot renew --dry-run<\/code><\/pre>\n\n\n\n
        \u8bbe\u7f6e\u5b9a\u65f6cron\u4efb\u52a1\u68c0\u67e5\u8fc7\u671f\u7eed\u7b7e<\/h2>\n\n\n\n
        crontab -e\n0 0 * * * certbot renew --quiet --deploy-hook \"\/usr\/bin\/systemctl reload nginx\"<\/code><\/pre>\n\n\n\n

        \u8fd9\u4e2a\u4efb\u52a1\u4f1a\u6bcf\u5929\u8fd0\u884c\u4e00\u6b21\uff0c\u68c0\u67e5\u8bc1\u4e66\u662f\u5426\u9700\u8981\u7eed\u7b7e\u3002\u5982\u679c\u9700\u8981\uff0c\u5b83\u4f1a\u81ea\u52a8\u7eed\u7b7e\uff0c\u5e76\u5728\u5b8c\u6210\u540e\u91cd\u8f7d Nginx<\/p>\n","protected":false},"excerpt":{"rendered":"
        \u5b89\u88c5certbot\u548c\u63d2\u4ef6 \u914d\u7f6eCloudflare API\u5bc6\u94a5 \u7f16\u8f91\u914d\u7f6e\u6587\u4ef6 \u66f4\u6539\u6743\u9650\u4e3a\u53ea\u8bfb \u7533\u8bf7\u8bc1\u4e66 \u914d\u7f6e\u81ea […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-20","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/blog.shufue.top\/index.php?rest_route=\/wp\/v2\/posts\/20","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.shufue.top\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.shufue.top\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.shufue.top\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.shufue.top\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=20"}],"version-history":[{"count":1,"href":"https:\/\/blog.shufue.top\/index.php?rest_route=\/wp\/v2\/posts\/20\/revisions"}],"predecessor-version":[{"id":21,"href":"https:\/\/blog.shufue.top\/index.php?rest_route=\/wp\/v2\/posts\/20\/revisions\/21"}],"wp:attachment":[{"href":"https:\/\/blog.shufue.top\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=20"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.shufue.top\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=20"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.shufue.top\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=20"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}