sudo apt -y install cockpit nginx
sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout \
/etc/ssl/private/nginx-selfsigned.key -out /etc/ssl/certs/nginx-selfsigned.crt \
-subj "/CN=$(hostname)/C=US"
sudo openssl dhparam -out /etc/ssl/certs/dhparam.pem 4096