Certbot

The certbot connects to Let's Encrypt to obtain an SSL certificate for your server.

sudo add-apt-repository ppa:certbot/certbot
sudo apt-get update
sudo apt-get install python-certbot-nginx

Create the file /etc/nginx/snippets/ssl-certbot-renewal.conf:

# support for certbot ssl auto-renewal
location ^~ /.well-known/ {
    default_type "text/plain";
    root /var/www/html/;
}

Include the following line in the ssl config for each domain:

include snippets/ssl-certbot-renewal.conf;

Restart nginx

Now run a command like this:

certbot certonly --webroot --webroot-path=/var/www/html \
-d example.com \
-d domain1.example.com \
-d domain2.example.com

Test with this:

sudo certbot renew --dry-run

Navigation menu