お名前VPSからConohaへの移行 (4)

% sudo apt install certbot python3-certbot-nginx

# お名前.comでAレコードの変更を行った直後 (2021/3/3 23:14頃)
% dig www.starplatinum.jp

; <<>> DiG 9.16.1-Ubuntu <<>> www.starplatinum.jp
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 27870
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 65494
;; QUESTION SECTION:
;www.starplatinum.jp.           IN      A

;; ANSWER SECTION:
www.starplatinum.jp.    300     IN      A       157.7.222.152

;; Query time: 4 msec
;; SERVER: 127.0.0.53#53(127.0.0.53)
;; WHEN: Wed Mar 03 23:14:48 JST 2021
;; MSG SIZE  rcvd: 64

# 6分程度で名前解決の結果が変わった (2021/3/3 23:20頃)
% dig www.starplatinum.jp

; <<>> DiG 9.16.1-Ubuntu <<>> www.starplatinum.jp
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 34062
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 65494
;; QUESTION SECTION:
;www.starplatinum.jp.           IN      A

;; ANSWER SECTION:
www.starplatinum.jp.    300     IN      A       160.251.76.216

;; Query time: 4 msec
;; SERVER: 127.0.0.53#53(127.0.0.53)
;; WHEN: Wed Mar 03 23:20:43 JST 2021
;; MSG SIZE  rcvd: 64

# *** Per Site Configuration ***
# すべてをメインサイトにリダイレクトする.
# ifステートメントは利用せず, 個別のserverステートメントで定義する.
# 理由は http://wiki.nginx.org/IfIsEvil を参照.
server {
        server_name  _;
        return 302 $scheme://www.starplatinum.jp$request_uri;
        # return 302 $scheme://v160-251-76-216.k2a5.static.cnode.io$request_uri;
}

server {
    server_name starplatinum.jp www.starplatinum.jp;
    # server_name v160-251-76-216.k2a5.static.cnode.io;
    root /var/www/vhosts/starplatinum;
(以下略)

# *** Per Site Configuration ***
# すべてをメインサイトにリダイレクトする.
# ifステートメントは利用せず, 個別のserverステートメントで定義する.
# 理由は http://wiki.nginx.org/IfIsEvil を参照.
#server {
#        server_name  _;
#        # return 302 $scheme://www.starplatinum.jp$request_uri;
#        return 302 $scheme://v160-251-76-216.k2a5.static.cnode.io$request_uri;

server {
    # server_name starplatinum.jp www.starplatinum.jp;
    server_name v160-251-76-216.k2a5.static.cnode.io;
    root /var/www/vhosts/starplatinum;
(以下略)

% sudo certbot --nginx -d starplatinum.jp -d www.starplatinum.jp
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator nginx, Installer nginx
Enter email address (used for urgent renewal and security notices) (Enter 'c' to
cancel): starplatinum@gmail.com

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Please read the Terms of Service at
https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf. You must
agree in order to register with the ACME server at
https://acme-v02.api.letsencrypt.org/directory
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
(A)gree/(C)ancel: A

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Would you be willing to share your email address with the Electronic Frontier
Foundation, a founding partner of the Let's Encrypt project and the non-profit
organization that develops Certbot? We'd like to send you email about our work
encrypting the web, EFF news, campaigns, and ways to support digital freedom.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
(Y)es/(N)o: Y
Obtaining a new certificate
Performing the following challenges:
http-01 challenge for starplatinum.jp
http-01 challenge for www.starplatinum.jp
Waiting for verification...
Cleaning up challenges
Deploying Certificate to VirtualHost /etc/nginx/sites-enabled/starplatinum.conf
Deploying Certificate to VirtualHost /etc/nginx/sites-enabled/starplatinum.conf

Please choose whether or not to redirect HTTP traffic to HTTPS, removing HTTP access.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1: No redirect - Make no further changes to the webserver configuration.
2: Redirect - Make all requests redirect to secure HTTPS access. Choose this for
new sites, or if you're confident your site works on HTTPS. You can undo this
change by editing your web server's configuration.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Select the appropriate number [1-2] then [enter] (press 'c' to cancel): 2
Redirecting all traffic on port 80 to ssl in /etc/nginx/sites-enabled/starplatinum.conf
Redirecting all traffic on port 80 to ssl in /etc/nginx/sites-enabled/starplatinum.conf

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Congratulations! You have successfully enabled https://starplatinum.jp and
https://www.starplatinum.jp

You should test your configuration at:
https://www.ssllabs.com/ssltest/analyze.html?d=starplatinum.jp
https://www.ssllabs.com/ssltest/analyze.html?d=www.starplatinum.jp
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

% sudo systemctl status certbot.timer
● certbot.timer - Run certbot twice daily
     Loaded: loaded (/lib/systemd/system/certbot.timer; enabled; vendor preset: enabled)
     Active: active (waiting) since Wed 2021-03-03 22:57:35 JST; 15h ago
    Trigger: Thu 2021-03-04 17:24:00 JST; 3h 21min left
   Triggers: ● certbot.service

Mar 03 22:57:35 160-251-76-216 systemd[1]: Started Run certbot twice daily.