Setting up SSL certificates on NGINX server w/ Certbot

notes.md

Setting UP SSL Certificates on NGINX Server on Ubuntu w/ Certbot

Certbot Docs: https://certbot.eff.org/docs/

Digital Ocean Tutorial: https://www.digitalocean.com/community/tutorials/how-to-secure-nginx-with-let-s-encrypt-on-ubuntu-16-04

1. Install Certbot:

$ sudo add-apt-repository ppa:certbot/certbot

2. Update package list:

$ sudo apt-get update

3. Install Certbot Nginx package:

$ sudo apt-get install python-certbot-nginx

4. Update Nginx config file:

$ sudo nano /etc/nginx/sites-available/default

5. Find server_name line, replace _ with your doman (simple domain and www domain).

server_name example.com www.example.com;

6. Verify configuration syntax:

$ sudo nginx -t

7. Reload Nginx:

$ sudo systemctl reload nginx

8. Check UFW firewall status:

$ sudo ufw status

(If it is not active, follow these steps to activate).

9. Update UFW to allow https traffic:

$ sudo ufw allow 'Nginx Full'
$ sudo ufw delete allow 'Nginx HTTP'

10. Get a Certbot certificate:

$ sudo certbot --nginx -d example.com -d www.example.com

(You may go through a series of prompts, agreements, email signup, etc.

11. Check your domain with an https call: https://example.com. If it makes secure connection, you're good to go.

12. Verify Certbot autorenewal:

$ sudo certbot renew --dry-run

Good Job!