[play with Tencent cloud] my operation strategy from domain name application to website filing in Tencent cloud

Recently, I developed a wechat applet for my work , In the applet, you want to initiate http If requested, the trusted domain name must be configured in the wechat applet management background , Wechat has 2 Requirements for point core ： belt https Domain name of and already ICP Filed domain name . The company has limited resources and can't provide any support , I remember that I have a domain name on Tencent cloud that has been idle , So I plan to take this domain name .

What to remind is , All the following operation steps are based on personal qualifications , If it is based on the enterprise qualification, some of the submitted materials or operations may be different , It is recommended to refer to the official product documentation .

Application domain name

There's nothing to say about this , All major public cloud service providers have domain name services , Go up and pick a domain name you like that hasn't been registered. Just place an order and buy it .

Buy links ：https://buy.cloud.tencent.com/domain

Tencent cloud domain name registration

After the domain name is purchased successfully, you can find your domain name on the domain name registration console page , Be careful , At this time, you bought the domain name , But you can't do anything with it , Ministry of industry and information technology from 2017 In, all domain names are required to have real name authentication . If not certified , Your domain name cannot be resolved , Can't be accessed , Equivalent to buying a lonely , So the first step is to do the certification .

Domain name real name authentication

Go to the domain name registration page , You can see that the current domain name is “ No real name authentication ” state , We click this status to enter into the page of filling in the certification materials , Here is nothing more than filling in the domain name holder information , Like gender 、 Telephone 、 Address 、 Upload ID card, etc . The uploaded data will be reviewed twice , The first one was reviewed by Tencent cloud itself , After passing the examination, it shall be submitted to the registration office for examination , The certification is successful only after the registration office has passed the examination . This process takes an indefinite time , Tencent cloud internal audit is relatively fast , commonly 10-30 There will be a response in about minutes , It's hard to say at the registration office , If you are in a hurry, you can put forward a work order and ask Tencent cloud customer service to urge you .

My advice is , First create a domain name information template , First do real name authentication for this template , When authenticating the domain name later, just select this template , On the one hand, it can avoid submitting domain name information repeatedly , On the other hand, official documents say that the template will be reviewed faster .

After successful authentication, you will receive SMS and email prompts , The following is what my domain name looks like after successful real name authentication ：

In the process of real name authentication, I also had an episode , Because I moved my account before , I have 2 All ID cards can be used , Each ID card has been checked for information , I tried seven or eight times and didn't pass , There's really no way to ask Tencent cloud for work orders , The work order was very responsive , The reply said that it might be related to the relocation of household registration , It is suggested to use the Hukou book for verification , I put my new identity and my new Hukou book together to take photos and submit them , Not yet. , The mentality is about to collapse . I remember that it was the first day of the Qingming Festival , I received a customer service call soon after I went to the work order for further inquiry , The customer service said that there was no problem with my data because there was no personal information about me at the registration office ,what？？？ I almost suspected that I was a black family .. They said that the registration office didn't go to work during the Tomb Sweeping Day holiday. They had to wait for work before they could give feedback , Then we have to wait . I went to the work order early in the morning on the day of work , In the afternoon, I received the approved information , What a toss .

But then again , The customer service of Tencent cloud is still good , There are people on duty on weekends and holidays, and the response is very fast , Important information will be confirmed by phone , Give me a compliment .

To configure DNS analysis

The next step is to configure the domain name DNS The server , The purpose of this step is to allow other machines to pass DNS The server recognizes your domain name . As a reminder , This step must be performed after the domain name has passed the real name authentication , Otherwise, the configuration will not succeed （ Actually DNS The server Tencent cloud has been configured by default , It just doesn't take effect without certification ）.

We open the domain name DNSPod Console , There is a one button detection inside DNS Server function , If the domain name has been authenticated, it will soon pass the test , At this time, your domain name DNS The server takes effect . default DNS The server address is f1g1ns1.dnspod.net and f1g1ns2.dnspod.net, You can change it to something else .

Finish this step , Your domain name is basically available , Pass after waiting for filing A The record resolves the domain name to a specific IP You can go up. .

Domain name filing

Keep on record It's a complicated thing , The whole process takes a long time , The official website claims to 20 About a working day . Don't be scared by this time , After I measured this time, I finished it in almost a week .

First of all, you should check whether your domain name meets the filing requirements , In this step, you can view the documentation . In addition to the basic conditions to be met for filing , The Regional Administration Bureau you submitted for filing also has corresponding review requirements , Generally speaking, the place of filing is your registered residence , Otherwise, you need to submit the residence certificate . We should understand these requirements in advance , It is also convenient to prepare materials and avoid detours .

One more thing is very important , If you want to record the domain name in Tencent cloud, you must have associated Tencent cloud server resources , The specific list is as follows ：

• Tencent cloud servers that meet the filing conditions have been purchased .
• Purchased a lightweight application server that meets the filing conditions .
• Tencent cloud that meets the filing conditions has been purchased Serverless service .
• Tencent cloud hosting service that meets the filing conditions has been purchased .
• Use a load balancing instance .
• The registration authorization code has been obtained .

Then we will start to fill out the application form , Pay attention to prepare your ID card in advance , You can't use the photos in your mobile phone library , Take pictures and use them now . The application process is as follows ：

Fill in the required information step by step according to the page prompts , The basic problem is not big . I think there are a few points to note ：

1、 The domain name must be full after real name authentication 3 You can only apply for filing within working days , I'm just stepping in here

2、 Don't do it before filing A Record resolution

2、 It is strict to fill in the website information , The website name must be written according to the rules , Otherwise it will be rejected

3、 Pay attention to the surrounding environment during video verification , Must have a pure white background wall , This audit is also very strict

4、 Keep your mobile phone unblocked after submitting information , A verification call from Tencent cloud will be received in about half an hour

After the application is submitted, it will be preliminarily reviewed by Tencent cloud , After passing the preliminary review, it will be submitted to the local administration bureau for filing for review , The approximate approval time will be displayed on the page ：

There is no urgent request under the normal process , My audit is still relatively fast .

After the record is passed , SMS 、 mail 、 official account 、 All the messages in the site will be pushed to you .

IP analysis

To resolve a domain name is to add a host record , Here, host records can be divided into several types , If we want to point to a server, we can use A Records are mapped to servers IP That's all right. , Several other host types are explained in detail on the page .

Apply for a domain name SSL certificate

Getting a certificate is actually a hassle , The self signed certificate is basically used in normal development , But this is certainly invalid for the public network environment . There are also many free applications on the Internet SSL Certificate tutorial , But the process is rather tedious , Security is not guaranteed , Otherwise, I will spend money to buy a formal certificate .

Fortunately, Tencent cloud takes care of poor customers like me , Launched a one-year free certificate , It smells good .

People will ask what to do when the certificate expires ？ It's simple , Just reapply for one more year .

This is the entrance to apply for a free certificate. You can go to SSL certificates console Page to find , Just fill in the information and submit it according to its requirements , The audit was quick .

Is there a simpler way to operate ？ There must be . In the just mentioned addition A Host page , When you take your A After adding records , The rear operation area has a black SSL Small button , The above prompt can generate a free certificate for the domain name with one click , Don't be too uncomfortable ~

A careful friend should notice , Two new entries will be added to the domain name after the certificate application TXT Host record of type , These two are used to verify the certificate .

Configure the website SSL

After the certificate is approved, we first download the certificate file ：

The downloaded file is named after your domain name zip package , It contains the original certificate and private key file , And in the major web Certificates that can be used directly on the server , It's very intimate ：

I use Nginx To deploy API, First upload the certificate to the server , And then modify Nginx The configuration file of ：

    # HTTPS server
    #
    server {
        listen       443 ssl;
        server_name  whdcwe.xxxxxx.cn; ##  Change to your domain name 

        ssl_certificate      cert.crt;  ##  Specify the certificate address 
        ssl_certificate_key  cert.key; ##  Specify private key 

        ssl_protocols  TLSv1 TLSv1.1 TLSv1.2;
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;

        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;

        ssl_prefer_server_ciphers  on;

        location / {
            proxy_pass http://localhost:5000;
            proxy_read_timeout 300s;
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_http_version 1.1;
            proxy_set_header Upgrade $http_upgrade;
            proxy_set_header Connection $connection_upgrade;
        }
    }

Restart after the configuration is complete Nginx that will do ：

sudo /usr/local/nginx/sbin/nginx -s reload

summary

I spent almost the whole process 10 Days or so , The time is mainly spent on the domain name authentication in the front , Fortunately, Tencent cloud is also on duty during holidays , When encountering problems, they receive feedback in a timely manner .

Although the official website document is more detailed than my article , But I guess a lot of people don't have the time and temperament to peruse documents a little bit , I hope this summary can help you .