mirror of
https://github.com/acmesh-official/acme.sh.git
synced 2026-01-12 19:12:33 +08:00
Created How to run on OpenWRT (markdown)
32
How-to-run-on-OpenWRT.md
Normal file
32
How-to-run-on-OpenWRT.md
Normal file
@@ -0,0 +1,32 @@
|
||||
Setup and run acme.sh on your OpenWRT router and have https secured management.
|
||||
|
||||
### Step 1: Install packages
|
||||
|
||||
`opkg install curl ca-certificates px5g uhttpd-mod-tls`
|
||||
|
||||
### Step 2: Configure Web Server
|
||||
Here we'll tell uhttpd to listen for https traffic and add two firewall rules to let that traffic through.
|
||||
The HTTP port 80 rule will be disabled by default
|
||||
|
||||
```
|
||||
uci set uhttpd.main.redirect_https=1
|
||||
uci set uhttpd.main.listen_https='[::]:443'
|
||||
##add https firewall rule
|
||||
uci set firewall.https=rule
|
||||
uci set firewall.https.target=ACCEPT
|
||||
uci set firewall.https.src=wan
|
||||
uci set firewall.https.proto=tcp
|
||||
uci set firewall.https.dest_port=443
|
||||
uci set firewall.https.name='web configuration'
|
||||
##add http firewall rule
|
||||
uci set firewall.https=rule
|
||||
uci set firewall.https.target=ACCEPT
|
||||
uci set firewall.https.src=wan
|
||||
uci set firewall.https.proto=tcp
|
||||
uci set firewall.https.dest_port=80
|
||||
uci set firewall.https.name='http web configuration'
|
||||
uci set firewall.http.enabled=0
|
||||
uci commit
|
||||
/etc/init.d/firewall restart
|
||||
/etc/init.d/uhttpd restart
|
||||
```
|
||||
Reference in New Issue
Block a user