diff --git "a/Ops/\346\234\215\345\212\241\345\231\250\351\205\215\347\275\256.adoc" "b/Ops/\346\234\215\345\212\241\345\231\250\351\205\215\347\275\256.adoc"
index 54806addc7511a6f643027819ada77559bcfacf2..03380f3626622ce14e178fa1cf64cdb02531968a 100644
--- "a/Ops/\346\234\215\345\212\241\345\231\250\351\205\215\347\275\256.adoc"
+++ "b/Ops/\346\234\215\345\212\241\345\231\250\351\205\215\347\275\256.adoc"
@@ -106,3 +106,25 @@ nft list tables inet
 
 == Node.js 运行时部署
 参考链接：<https://github.com/nodesource/distributions>
+
+== SSL 配置
+
+[source, bash]
+----
+# 下载并安装 acme.sh
+# link: https://github.com/acmesh-official/acme.sh
+# my@example.com 可以替换为自己的邮箱
+curl https://get.acme.sh | sh -s email=my@example.com
+
+# 更换默认CA
+# link: https://github.com/acmesh-official/acme.sh/issues/4980
+acme.sh --set-default-ca --server letsencrypt
+
+# 申请域名 SSL 证书
+# link: https://github.com/acmesh-official/acme.sh/wiki/dnsapi
+export Namesilo_Key="<key>"
+acme.sh --issue --dns dns_namesilo -d example.com -d *.example.com --dnssleep 900
+
+# 安装 SSL 证书
+acme.sh --install-cert -d example.com -d *.example.com --key-file /path/to/key.pem --fullchain-file /path/to/cert.pem --reloadcmd "service nginx force-reload"
+----