Let's Encrypt で https 対応

readme.md

$ sudo add-apt-repository ppa:certbot/certbot
$ sudo apt-get update
$ sudo apt-get install certbot

standalone

$ sudo certbot certonly --standalone -d example.com -m some@example.com --agree-tos -n

確認

$ sudo ls /etc/letsencrypt/live/
example.com

nginx.conf

server {
    listen 443 ssl;
    ssl_certificate /etc/letsencrypt/live/example.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_prefer_server_ciphers on;
    ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';

    server_name example.com;
    location / {
      ...
    }
}

更新

sudo certbot certonly --webroot -w /var/www/html -d example.com --agree-tos --force-renewal -n