Install安装部署

Clone, prepare config, mount SSH keys, compose up.克隆、准备配置、挂载 SSH、启动 Compose。

1. Clone1. 克隆仓库

$ git clone https://github.com/huiyonghkw/CertHub.git
$ cd CertHub

2. Prepare config from examples2. 从示例复制配置

$ cp config/domains.yml.example config/domains.yml
$ cp config/servers.yml.example config/servers.yml
$ cp config/notify.yml.example config/notify.yml
# dns-providers.yml: create from your own keys (do not commit)
$ mkdir -p data/certs data/logs data/backups

Edit the YAML next — see Configure. You can start the stack first and fill keys before the first generate.YAML 怎么填见配置说明。也可以先把容器拉起来，真正跑 generate 之前再填密钥。

3. Mount SSH keys3. 挂载 SSH 密钥

docker-compose.yml mounts ~/.ssh read-only into the manager container. Make sure the key that can log into your nginx hosts is in that directory, and the public key is already on the servers.docker-compose.yml 会把本机 ~/.ssh 只读挂进管理容器。请确认能登录目标 nginx 机器的私钥在这个目录里，且对应公钥已装到服务器上。

$ ssh -i ~/.ssh/id_rsa root@你的服务器IP hostname
✓ should print without password prompt应免密打出主机名

4. Start services4. 启动服务

$ docker compose up -d
$ docker compose ps
✓ acme-ssl-manager
✓ acme-health   # http://localhost:8080/health

• acme-manager — certificate engine + cron.acme-manager：证书引擎和定时任务。
• acme-health — Community read-only health endpoint on port 8080.acme-health：Community 只读健康检查，端口 8080。
• Optional Prometheus is in the same compose file.同一份 compose 里还可选开 Prometheus。

5. Health check5. 健康检查

$ docker exec acme-ssl-manager /scripts/cert-manager-simple.sh health-check
$ curl -s http://127.0.0.1:8080/health