Node.js Express SSL(Let's Encrypt) 세팅

sudo snap install --classic certbot

sudo certbot certonly --standalone

If you really want to skip this, you can run the client with --register-unsafely-without-email but you will then be unable to receive notice about impending expiration or revocation of your certificates or problems with your Certbot installation that will lead to failure to renew. Enter email address (used for urgent renewal and security notices) (Enter 'c' to cancel): [이메일 주소] - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Please read the Terms of Service at https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf. You must agree in order to register with the ACME server. Do you agree? - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - (Y)es/(N)o: Y - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Would you be willing, once your first certificate is successfully issued, to share your email address with the Electronic Frontier Foundation, a founding partner of the Let's Encrypt project and the non-profit organization that develops Certbot? We'd like to send you email about our work encrypting the web, EFF news, campaigns, and ways to support digital freedom. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - (Y)es/(N)o: Y Account registered. Please enter the domain name(s) you would like on your certificate (comma and/or space separated) (Enter 'c' to cancel): [도메인] Requesting a certificate for [도메인] Successfully received certificate. Certificate is saved at: /etc/letsencrypt/live/[도메인]/fullchain.pem Key is saved at: /etc/letsencrypt/live/[도메인]/privkey.pem This certificate expires on 2022-02-11. These files will be updated when the certificate renews. Certbot has set up a scheduled task to automatically renew this certificate in the background. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - If you like Certbot, please consider supporting our work by: * Donating to ISRG / Let's Encrypt: https://letsencrypt.org/donate * Donating to EFF: https://eff.org/donate-le - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

import fs from 'fs'; let sslKeys = {}; if (process.env.NODE_ENV === 'production') { // SSL 인증서 키 sslKeys = { ca: fs.readFileSync('/etc/letsencrypt/live/[도메인]/fullchain.pem'), key: fs.readFileSync('/etc/letsencrypt/live/[도메인]/privkey.pem'), cert: fs.readFileSync('/etc/letsencrypt/live/[도메인]/cert.pem'), }; } export default sslKeys;

'use strict'; import '../src/env.mjs'; import https from 'https'; import sslKeys from '../src/config/sslKeys.mjs'; import app from '../app.mjs'; const PORT = process.env.PORT || 5000; if (process.env.NODE_ENV === 'production') { // server https.createServer(sslKeys, app).listen(443, () => { console.log(`Node.js : 443 포트에서 서버가 가동되었습니다!`); }); } else { // server app.listen(PORT, () => { console.log(`Node.js : ${PORT} 포트에서 서버가 가동되었습니다!`); }); }

'use strict'; import express from 'express'; import cors from 'cors'; import home from './src/routes/home/index.mjs'; import { socketIO } from './src/socket/socketIO.mjs'; const app = express(); // 소켓 설정 socketIO(app); // middleware app.use(cors()); app.use(express.json()); app.use(express.urlencoded({ extended: true })); app.use('/', home); export default app;

import http from 'http'; import https from 'https'; import sslKeys from '../config/sslKeys.mjs'; import { Server } from 'socket.io'; const PORT_SOCKET = process.env.PORT_SOCKET || 3500; const socketIO = app => { let httpServer; if (process.env.NODE_ENV === 'production') { // server httpServer = https.createServer(sslKeys, app).listen(PORT_SOCKET, () => { logger.info(`socket.io : ${PORT_SOCKET} 포트에서 SSL로 연결되었습니다!`); }); } else { httpServer = http.createServer(app).listen(PORT_SOCKET, () => { logger.info(`socket.io : ${PORT_SOCKET} 포트에 연결되었습니다!`); }); } // socket 서버 const io = new Server(httpServer, { cors: { origin: '*', methods: ['GET', 'POST'], }, }); io.on('connection', socket => { // 접속자 수 socket.emit('usercount', { count: io.engine.clientsCount }); }); return io; }; export { socketIO };

# cron 설치 sudo apt update -y sudo apt install -y cron # cron 시작 sudo service cron start # cron systemctl 활성화 sudo systemctl enable cron.service # cron systemctl 등록 확인 sudo systemctl list-unit-files | grep cron sudo service cron status

# crontab에 등록하기 sudo crontab -e # 2개월마다 1일에 인증서를 갱신하고 pm2로 서버를 재시작 하겠다는 뜻 0 0 1 */2 * /usr/bin/certbot renew --renew-hook="sudo pm2 restart app" # 잘 등록되었는지 목록 확인 sudo crontab -l # crontab 실행 로그 확인 view /var/log/syslog