Posted on
• Web Development

Setting up SSL/TLS with Certbot and Nginx

Author
  • User
    Linux Bash
    Posts by this author
    Posts by this author

Comprehensive Guide to Setting Up SSL/TLS with Certbot and Nginx on Linux

As web developers, one of our key responsibilities is to ensure the security of the websites we create. An essential step in securing a website is setting up SSL/TLS, which encrypts data transferred between a user's browser and the web server, protecting it from interception or tampering. In this comprehensive guide, we'll walk through how to set up SSL/TLS for your website hosted on a Linux server using Nginx and Certbot.

What is SSL/TLS?

SSL (Secure Sockets Layer) and TLS (Transport Layer Security) are cryptographic protocols designed to provide secure communication over a computer network. When a website is accessed via HTTPS, these protocols ensure that the data transmitted is secure and encrypted.

Why Nginx?

Nginx is a powerful, high-performance web server that is particularly efficient in handling connections with minimal resource usage. It’s popular for its stability, rich feature set, and low resource consumption.

What is Certbot?

Certbot is a free, open-source software tool for automatically using Let’s Encrypt certificates on manually-administered websites to enable HTTPS. It simplifies the process by automating the creation, deployment, and renewal of SSL/TLS certificates.

Pre-requisites

Before getting started, you need:

  • A Linux server with Nginx installed.

  • A registered domain name pointed to your server's IP address.

  • Sudo or root privileges on the server.

Step 1: Install Certbot

Certbot is available in the software repositories of most popular Linux distributions. The installation process can vary depending on your Linux distribution.

For Ubuntu/Debian:

sudo apt update
sudo apt install certbot python3-certbot-nginx

For CentOS/RHEL:

sudo dnf install epel-release
sudo dnf install certbot python3-certbot-nginx

For openSUSE:

sudo zypper install certbot python3-certbot-nginx

Step 2: Configure Nginx

Ensure your Nginx configuration points to your domain. Here’s a basic setup:

server {
    listen 80;
    server_name yourdomain.com www.yourdomain.com;

    location / {
        root /var/www/yourdomain.com/html;
        index index.html index.htm;
    }
}

Make sure to replace yourdomain.com with your registered domain name and adjust the root directive to your web document root.

Step 3: Allow HTTPS Through the Firewall

If you're using a firewall, allow HTTPS traffic:

sudo ufw allow 'Nginx Full'
sudo ufw delete allow 'Nginx HTTP'

Step 4: Obtaining an SSL/TLS Certificate

Certbot can automatically obtain a certificate and modify your Nginx configuration to use it with the following command:

sudo certbot --nginx -d yourdomain.com -d www.yourdomain.com

You will be prompted to enter an email address for lost key recovery and notices, and to agree to the terms of service. You’ll also be asked if you want to redirect HTTP traffic to HTTPS, which you should agree to.

Step 5: Verifying Certbot Auto-Renewal

Let’s Encrypt certificates only last for 90 days, but Certbot includes a script that automatically renews your certificates. You can test this process with:

sudo certbot renew --dry-run

Conclusion

You have now successfully secured your website with HTTPS using Certbot and Nginx on your Linux server. This setup not only improves your website’s security but can also help your site’s SEO and trustworthiness.

Remember that keeping your software up to date and periodically checking your configurations are good security practices that complement the use of SSL/TLS certificates. Regularly revisit your configurations, especially to tweak performance and security settings as needed.

By following this guide, web developers of all skill levels can ensure their sites are secure and trusted by browsers and users alike, fostering a safer web environment for everyone.

Further Reading

For further reading on SSL/TLS, Certbot, and Nginx, consider these resources:

These resources provide extensive information and step-by-step guides that delve deeper into each component of setting up a secure web server.

Related posts