1、在apache的配置文件httpd.conf里最后一行添加：
IncludeOptional /www/server/panel/vhost/apache/*.conf
2、添加/www/server/panel/vhost/apache/www.xxx.com.conf
<VirtualHost *:80>
ServerAdmin webmaster@example.com
DocumentRoot "/www/wwwroot/xiaochengxu"
ServerName 81d06989. www.xxx.com
ServerAlias xcx.nmpfit.com
errorDocument 404 /404.html
ErrorLog "/www/wwwlogs/ www.xxx.com -error_log"
CustomLog "/www/wwwlogs/ www.xxx.com -access_log" combined
#HTTP_TO_HTTPS_START
<IfModule mod_rewrite.c>
RewriteEngine on
RewriteCond %{SERVER_PORT} !^443$
RewriteRule (.*) https://%{SERVER_NAME}$1 [L,R=301]
</IfModule>
#HTTP_TO_HTTPS_END
#HTTP_TO_HTTPS_START
<IfModule mod_rewrite.c>
RewriteEngine on
RewriteCond %{SERVER_PORT} !^443$
RewriteRule (.*) https://%{SERVER_NAME}$1 [L,R=301]
</IfModule>
#HTTP_TO_HTTPS_END
#HTTP_TO_HTTPS_START
<IfModule mod_rewrite.c>
RewriteEngine on
RewriteCond %{SERVER_PORT} !^443$
RewriteRule (.*) https://%{SERVER_NAME}$1 [L,R=301]
</IfModule>
#HTTP_TO_HTTPS_END
#DENY FILES
<Files ~ (\.user.ini|\.htaccess|\.git|\.svn|\.project|LICENSE|README.md)$>
Order allow,deny
Deny from all
</Files>
#PHP
<FilesMatch \.php$>
SetHandler "proxy:unix:/tmp/php-cgi-56.sock|fcgi://localhost"
</FilesMatch>
#PATH
<Directory "/www/wwwroot/xiaochengxu">
SetOutputFilter DEFLATE
Options FollowSymLinks
AllowOverride All
Require all granted
DirectoryIndex index.php index.html index.htm default.php default.html default.htm
</Directory>
</VirtualHost>
<VirtualHost *:443>
ServerAdmin webmasterexample.com
DocumentRoot "/www/wwwroot/xiaochengxu/"
ServerName SSL. www.xxx.com
ServerAlias www.xxx.com
errorDocument 404 /404.html
ErrorLog "/www/wwwlogs/ www.xxx.com -error_log"
CustomLog "/www/wwwlogs/ www.xxx.com -access_log" combined
#SSL
SSLEngine On
#SSLCertificateFile /etc/letsencrypt/live/ www.xxx.com /fullchain.pem
#SSLCertificateKeyFile /etc/letsencrypt/live/ www.xxx.com /privkey.pem
SSLCertificateFile /etc/letsencrypt/live/ www.xxx.com /server_public.crt
SSLCertificateKeyFile /etc/letsencrypt/live/ www.xxx.com /server.key
SSLCertificateChainFile /etc/letsencrypt/live/ www.xxx.com /server_chain.crt
SSLCipherSuite EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH
SSLProtocol All -SSLv2 -SSLv3
SSLHonorCipherOrder On
#PHP
<FilesMatch \.php$>
SetHandler "proxy:unix:/tmp/php-cgi-56.sock|fcgi://localhost"
</FilesMatch>
#DENY FILES
<Files ~ (\.user.ini|\.htaccess|\.git|\.svn|\.project|LICENSE|README.md)$>
Order allow,deny
Deny from all
</Files>
#PATH
<Directory "/www/wwwroot/xiaochengxu/">
SetOutputFilter DEFLATE
Options FollowSymLinks
AllowOverride All
Require all granted
DirectoryIndex index.php index.html index.htm default.php default.html default.htm
</Directory>
</VirtualHost>
3、把下载下来的证书文件放到 /etc/letsencrypt/live/www.xxx.com/里，然后重启apache就行了
