https://stackonward.com/zh/tags/lets-encrypt/Recent content in Let's Encrypt on 远栈Hugozh-CNThu, 03 Sep 2026 18:30:00 +0800https://stackonward.com/zh/posts/https-certificate-automatic-renewal/Wed, 02 Sep 2026 23:00:00 +0800https://stackonward.com/zh/posts/https-certificate-automatic-renewal/<p>Caddy 可以自动申请和续期 HTTPS 证书。自动 HTTPS 依赖域名配置、DNS、ACME 验证入口和证书存储；任何一项不可用，签发或续期都会失败。容器已经启动，只能说明 Caddy 进程正在运行。</p> <figure> <img src="https://stackonward.com/images/posts/https-certificate-automatic-renewal/zh/acme-renewal-flow.svg" alt="Caddy 从读取域名、完成 ACME 验证、保存证书到后台续期和外部监测的流程图" loading="lazy" decoding="async"> <figcaption>签发后，证书、私钥和 ACME 账号状态写入数据目录；后台续期仍会再次使用验证入口。</figcaption> </figure> <h2 id="自动-https-的生效条件">自动 HTTPS 的生效条件</h2> <p><a href="https://caddyserver.com/docs/automatic-https" target="_blank" rel="noopener">Caddy 的 Automatic HTTPS 文档<span class="sr-only">（在新标签页打开）</span></a>要求以下条件同时成立：</p>