sudo apt install certbot python3-certbot-nginx -ysudo nano /etc/nginx/sites-available/example.comserver {
listen 80;
listen [::]:80;
root /var/www/html;
# Add index.php to the list if you are using PHP
index index.html index.htm index.nginx-debian.html;
server_name example.com;
location / {
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_pass http://127.0.0.1:8080;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
#try_files $uri $uri/ =404;
}
#location ~ /\.ht {
# deny all;
#}
}sudo ln -fs /etc/nginx/sites-available/example.com /etc/nginx/sites-enabled/example.comsudo certbot --nginx -d example.comsudo systemctl status certbot.timer
Check if certbot autorenew is setup properly
sudo certbot renew --dry-runsudo ufw allow 'Nginx Full'To setup DNS based SSL one-time only
sudo certbot --manual --preferred-challenges dns certonly -d example.com
Leave a Reply