[WEB SERVER] Let’s Encrypy Multi DNS

Nginx 서버 설정

/etc/nginx/sites-available/example.conf 내에 nginx 서버 블록 정리

활성화 및 테스트:

sudo ln -s /etc/nginx/sites-available/example.conf /etc/nginx/sites-enabled/
sudo nginx -t && sudo systemctl reload nginx

오류 해결

다음과 같은 오류로 nginx 블록 테스트 실패 시:

root@ip-172-xx-xx-xx:/etc/letsencrypt# nginx -t
2025/xx/xx xx:xx:xx [emerg] 159990#159990: BIO_new_file("/etc/letsencrypt/ssl-dhparams.pem") failed (SS
L: error:80000002:system library::No such file or directory:calling fopen(/etc/letsencrypt/ssl-dhparams
.pem, r) error:10000080:BIO routines::no such file)
nginx: configuration file /etc/nginx/nginx.conf test failed

root@ip-172-xx-xx-xx:/etc/letsencrypt# sudo openssl dhparam -out ssl-dhparams.pem 2048

2. Missing the file: options-ssl-nginx.conf

ubuntu@ip-172-xx-xx-xx:/etc/nginx$ sudo nginx -t && sudo systemctl reload nginx
2025/09/24 10:50:21 [emerg] 159881#159881: open() "/etc/letsencrypt/options-ssl-nginx.conf" failed (2: 
No such file or directory) in /etc/nginx/sites-enabled/wp-predorable-com:18

Github에서 최신 파일 받아오기

https://raw.githubusercontent.com/certbot/certbot/master/certbot-nginx/certbot_nginx/_internal/tls_configs/options-ssl-nginx.conf

# This file contains important security parameters. If you modify this file
# manually, Certbot will be unable to automatically provide future security
# updates. Instead, Certbot will print and log an error message with a path to
# the up-to-date file that you will need to refer to when manually updating
# this file. Contents are based on https://ssl-config.mozilla.org

ssl_session_cache shared:le_nginx_SSL:10m;
ssl_session_timeout 1440m;
ssl_session_tickets off;

ssl_protocols TLSv1.2 TLSv1.3;
ssl_prefer_server_ciphers off;

ssl_ciphers "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384";