看一下log

2016/07/07 10:45:56 [error] 737#0: OCSP_basic_verify() failed (SSL: error:27069076:OCSP routines:OCSP_basic_verify:signer certificate not found) while requesting certificate status, responder: ocsp.int-x3.letsencrypt.org
2016/07/07 10:51:21 [error] 737#0: OCSP_basic_verify() failed (SSL: error:27069076:OCSP routines:OCSP_basic_verify:signer certificate not found) while requesting certificate status, responder: ocsp.int-x3.letsencrypt.org
2016/07/07 10:57:06 [error] 737#0: OCSP_basic_verify() failed (SSL: error:27069076:OCSP routines:OCSP_basic_verify:signer certificate not found) while requesting certificate status, responder: ocsp.int-x3.letsencrypt.org
2016/07/07 11:08:46 [error] 737#0: OCSP_basic_verify() failed (SSL: error:27069076:OCSP routines:OCSP_basic_verify:signer certificate not found) while requesting certificate status, responder: ocsp.int-x3.letsencrypt.org

竟然有滿滿的錯誤

這是使用了 letsencrypt 的ssl

解決方式很簡單

修改一下 Nginx config

ssl_certificate  /etc/letsencrypt/live/boredom.gotdns.com/cert.pem;

變成

ssl_certificate  /etc/letsencrypt/live/boredom.gotdns.com/fullchain.pem;

就完成了

######################################

再來另一個錯誤 (Joomla 3.2)  似乎也可透過升級解決!

FastCGI sent in stderr: "PHP message: PHP Warning:  session_start(): Failed to decode session object. Session has been destroyed in /boredom.gotdns.com/libraries/joomla/session/session.php

進到Joomla 目錄  vi ./cli/finder_indexer.php

JFactory::getApplication('site');
$_SERVER['HTTP_HOST'] = 'domain.com';

把這兩行"順序"對調即可

$_SERVER['HTTP_HOST'] = 'domain.com';
JFactory::getApplication('site');

之前試著操作過的Ansible因腦袋放鬆太久

趁現在閒著，把比較常用的初階Ansible操作記錄一下

安裝就先略過了

root@ubuntu:/etc/ansible#
這個目錄下有兩個主要設定檔案
一個是hosts, 一個是ansible.cfg

通常我會修改的是

I use Let's Encrypt SSL certificate for my website boredom.gotdns.com

Try to use script to auto renew when days < 30 days

Below is the sample.