Nginx + Let's Encrypt

Secure your Nginx stack with automated, industry-standard TLS encryption using Certbot and Let's Encrypt.

This setup pairs the high-performance Nginx web server with the automated certificate authority (CA) Let's Encrypt. You use the Certbot client to handle ACME protocol challenges, which validates domain ownership and installs 2048-bit RSA or ECDSA certificates in seconds. It eliminates manual renewals by scheduling a cron job or systemd timer to refresh certificates every 60 days. The result is a Grade A SSL Labs rating, forced HTTPS redirection, and modern security headers (like HSTS) implemented with minimal configuration overhead.

https://www.nginx.com/blog/using-free-ssltls-certificates-from-lets-encrypt-with-nginx/