– Generate SSL Letsencrypt

We will secure our Magento installation using SSL from Letsencrypt. Install the Letsencrypt using the apt command below.

sudo apt install letsencrypt -y

After the installation is complete, stop the nginx service.

systemctl stop nginx

Now generate the SSL certificates for the domain name using certbot command as below.

certbot certonly --standalone -d magento.hakase-labs.pw

Type your email address, accept the Letsencrypt TOS, then type ‘N’ for email sharing.

When it’s complete, you will get the result as below.

The Letsencrypt SSL certificate files have been generated to the ’/etc/letsencrypt/live’ directory.

FOR SSL  Configure Nginx Virtual Host file

upstream fastcgi_backend {
        server  unix:/run/php/php7.1-fpm.sock;
}

server {
    listen 80;
    listen [::]:80;
    server_name www.magento-dev.com;
    return 301 https://$server_name$request_uri;
}

server {

        listen 443 ssl;
        server_name magento-dev.com;

        ssl on;
        ssl_certificate /etc/letsencrypt/live/magento.hakase-labs.pw/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/magento.hakase-labs.pw/privkey.pem;

        set $MAGE_ROOT /var/www/magento2;
        set $MAGE_MODE developer;
        include /var/www/magento2/nginx.conf.sample;
}