references/server/nginx_webserver/https_ssl.md

HTTPS/SSL

To make your website safer. It's also good for SEO, and having people actually be willing to us your site.

Install certbot

And it's nginx module apt install python3-certbot-nginx

Start certbot

certbot --nginx This will ask for an email, for renewals certbot --nginx --register-unsafely-without-email This will not ask for an email (although it's probably a good idea to use one)

Read the terms and accept what you want. E.g. if you don't want to give your email to anyone, deny that.

When it asks for auto redirects, select option 2

Apply SSL changes (if 2 selected)

systemctl reload nginx

Automatic SSL certificated renewal

With a crontab

crontab -e

Add a line containing 0 0 1 * * certbot --nginx renew Every 1 month, it will try to renew your SSL certificates