SSL证书适用于子域，但不适用于使用云轴和证书机器人的主域

Question

所以我管理域 britoanderson.com，我试图让ssl工作。我使用证书机器人为两个w制作证书。子域和主 britoanderson.com 域。我将云版本设置为“完整”加密模式。出于某种原因，SSL证书适用于 https://www.britoanderson.com/ 但不能用于网站拒绝打开 https://britoanderson.com/。

以下是我的nginx默认文件：

server {
    if ($host = www.britoanderson.com) {
        return 301 https://www.$host$request_uri;
    } # managed by Certbot


    if ($host = britoanderson.com) {
        return 301 https://$host$request_uri;
    } # managed by Certbot


    listen 80 default_server;
    listen [::]:80 default_server;

    root /var/www/html/;
    index index.php index.html index.htm;

    server_name britoanderson.com www.britoanderson.com;

        location / {
                try_files $uri $uri/ /index.php?$args;
        }

        location ~ \.php$ {
                include snippets/fastcgi-php.conf;
                fastcgi_pass unix:/run/php/php7.0-fpm.sock;

        }
}

server {
        listen 443 ssl http2;
        listen [::]:443 ssl http2;


        ssl on;
        ssl_certificate /etc/letsencrypt/live/britoanderson.com/fullchain.pem; # managed by Certbot
        ssl_certificate_key /etc/letsencrypt/live/britoanderson.com/privkey.pem; # managed by Certbot

        root /var/www/html/;
        index index.php index.html index.htm;

        server_name britoanderson.com www.britoanderson.com;

        location / {
                try_files $uri $uri/ /index.php?$args;
        }

        location ~ \.php$ {
                include snippets/fastcgi-php.conf;
                fastcgi_pass unix:/run/php/php7.0-fpm.sock;
        }

}

主域 britoanderson.com 和子域 www 的 A 记录都已设置在 cloudflare 上。

我做错了什么？为什么主网站就是打不开？

Answer 1

结果是我的电脑给了我一个DNS_PROBE_FINISHED_NXDOMAIN，而实际错误在重定向中。移除

if ($host = www.britoanderson.com) {
        return 301 https://www.$host$request_uri;
    } # managed by Certbot


    if ($host = britoanderson.com) {
        return 301 https://$host$request_uri;
    } # managed by Certbot

修复了问题

Answer 2

颁发证书后，您是否重新启动了nginx？我只能访问http站点，但不能访问https站点，所以看起来certbot所做的https转发也不起作用。