Linux & Ops
Certbot a SSL certifikáty
HTTPS je standard. Let's Encrypt + Certbot = automatické SSL za minuty.
Instalace
sudo apt install certbot python3-certbot-nginx
Certifikát
sudo certbot --nginx -d example.com -d www.example.com
sudo certbot renew --dry-run
Konfigurace
server {
listen 443 ssl http2;
ssl_certificate /etc/letsencrypt/live/example.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem;
}
server { listen 80; return 301 https://$server_name$request_uri; }
HTTPS pro všechny
Certbot — zadarmo a automaticky. Nastavte jednou, zapomeňte.