NGINX Let’s Encrypt SSL installation

By admin | December 11, 2022

Lego Client 설치 (version 확인하여 수정)

cd /tmp 
curl -Ls https://api.github.com/repos/xenolf/lego/releases/latest | grep browser_download_url | grep linux_amd64 | cut -d '"' -f 4 | wget -i - 
tar xf lego_vX.Y.Z_linux_amd64.tar.gz
sudo mkdir -p /opt/bitnami/letsencrypt 
sudo mv lego /opt/bitnami/letsencrypt/lego

Nginx 서버 중단하고 SSL 신청

sudo /opt/bitnami/ctlscript.sh stop nginx
sudo /opt/bitnami/letsencrypt/lego --tls --email="davidjhk@gmail.com " --domains="yourdomain.com" --domains="www.yourdomain.com" --path="/opt/bitnami/letsencrypt" run
sudo /opt/bitnami/ctlscript.sh start nginx

Nginx Vhosts 설정파일 수정 (기존 인증서를 주석처리하고 다음 라인을 추가)

# new certificate below the line. 
ssl_certificate "/opt/bitnami/letsencrypt/certificates/yourdomain.com.crt"; 
ssl_certificate_key  "/opt/bitnami/letsencrypt/certificates/yourdomain.com.key";

Nginx 설정 테스트

nginx -t

Nginx 설정 테스트 통과하면 서버 Reload

nginx -s reload

Posted in Tech