Auto setup https on nginx with let's encrypt

nginx-letsencrypt-autosetup.md

HTTPS setup on Nginx server with Let's Encrypt

1. download certbot tool: sudo git clone https://github.com/certbot/certbot /opt/certbot
2. generate certs: sudo /opt/certbot/certbot-auto --nginx
3. in the menu select domain for which you want to generate SSL certs
4. in next menu select if you want http && https access to your site or https exclusively

That's all, your site is now running under https.

If you want to make https connection more secure generate 4096 DHA key (could take almost 20 minutes):

5. sudo openssl dhparam -out /etc/ssl/certs/dhparam.pem 4096
6. include newly generated pem key in server configuration next to SSL configuration

server {
      ...
      ssl_dhparam /etc/ssl/certs/dhparam.pem;
      ...
}

8. verify nginx syntax: sudo nginx -t
9. restart nginx service: sudo service nginx restart

To autoupdate certificate create new cron record:

10. sudo crontab -e
11. check cert renew once per week 0 3 * * 1 /opt/certbot/certbot-auto --nginx renew --quiet --non-interactive >> /var/log/letsencrypt-renew.log

=======

If cert generate fails add these lines in your site's nginx config:

location ~ .well-known/acme-challenge/ {
      root /var/www/letsencrypt;
      default_type text/plain;
}

Alternative approach to get https certificates: sudo /opt/certbot/certbot-auto certonly --standalone -d www.site.com -d site.com

// inspiration: https://arashmilani.com/post?id=95