Let’s Encrypt nginx example

Free SSL certificates! This not a mirage. Follow this instructions step by step and you will be able to secure all your running projects for free.

About let’s encrypt: let’s Encrypt is a free, automated, and open certificate authority (CA), run for the public’s benefit.

Installation and Usage

wget https://dl.eff.org/certbot-auto
mv certbot-auto /usr/local/sbin/
chmod a+x /usr/local/sbin/certbot-auto

Generate the first certificate:

certbot-auto certonly -a webroot --webroot-path=/srv/www/zeldor.biz -d zeldor.biz

Congratulations! Your certificate and chain have been saved at:
/etc/letsencrypt/live/zeldor.biz/

NGINX configuration

ssl_certificate /etc/letsencrypt/live/zeldor.biz/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/zeldor.biz/privkey.pem;

Apache configuration

SSLCertificateFile "/etc/letsencrypt/live/zeldor.biz/fullchain.pem"
SSLCertificateKeyFile "/etc/letsencrypt/live/zeldor.biz/privkey.pem"

Postfix configuration

smtpd_tls_cert_file=/etc/letsencrypt/live/zeldor.biz/fullchain.pem
smtpd_tls_key_file=/etc/letsencrypt/live/zeldor.biz/privkey.pem
 
smtp_tls_cert_file=/etc/letsencrypt/live/zeldor.biz/fullchain.pem
smtp_tls_key_file=/etc/letsencrypt/live/zeldor.biz/privkey.pem

Dovecot configuration

File: /etc/dovecot/conf.d/10-ssl.conf

ssl_cert = </etc/letsencrypt/live/mail.zeldor.com/fullchain.pem
ssl_key = </etc/letsencrypt/live/mail.zeldor.com/privkey.pem
ssl_ca = </etc/letsencrypt/live/mail.zeldor.com/chain.pem
ssl_dh = </etc/dovecot/dh.pem

Now check with SSL labs the overall SSL-security for your domain.

Sources

• Let’s Encrypt Logo from the official website