Rocky 9

How to Install Let's Encrypt SSL in Nginx on Rocky Linux 9

To install Let's Encrypt SSL in Nginx on Rocky Linux 9, follow the steps below:

Step 1 : Ensure Domain DNS Verification

Make sure your domain has proper DNS settings for verification.

Step 2 : Run the following command to update your system:

sudo dnf update

Step 3 : Install Certbot and Python3-certbot-nginx

sudo dnf install certbot python3-certbot-nginx

Step 4 : Create a Nginx server block configuration for your domain and add the necessary configuration.

sudo nano /etc/nginx/conf.d/example.devtutorial.io.conf

Inside the file, add the Nginx server block configuration:

server {
    listen 80;
    server_name example.devtutorial.io;
    
    root /var/www/example.devtutorial.io;
    index index.html;

    location / {
        try_files $uri $uri/ =404;
    }
}

Step 5 : Create the directory for the domain and an index.html file:

sudo mkdir -p /var/www/example.devtutorial.io
sudo nano /var/www/example.devtutorial.io/index.html

- Inside the index.html file, add basic HTML content and save:

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Welcome to example.devtutorial.io</title>
</head>
<body>
    <h1>example.devtutorial.io</h1>
</body>
</html>

- Set the appropriate ownership and permissions for Nginx to access the files:

sudo chown -R nginx:nginx /var/www/example.devtutorial.io
sudo chmod -R 755 /var/www/example.devtutorial.io

Step 6 : If SELinux is enabled, set the appropriate context for the web content:

sudo semanage fcontext -a -t httpd_sys_rw_content_t "/var/www/example.devtutorial.io(/.*)?"
sudo restorecon -Rv /var/www/example.devtutorial.io

Step 7 : Ensure there are no syntax errors in your Nginx configuration:

sudo nginx -t

Step 8 : Restart Nginx to apply the changes:

sudo systemctl restart nginx

Step 9 : Run the following command to obtain the SSL certificate:

sudo certbot --nginx -d example.devtutorial.io

- Enter your email address when prompted.

- Agree to the terms of service by typing 'y'

- Share your email address with the Electronic Frontier Foundation (EFF) if you wish by typing 'y'

- Once the process is successful, you will receive a confirmation message.

Step 10 : Test the certificate renewal process:

sudo certbot renew --dry-run

Step 11 : Visit your domain (https://example.devtutorial.io) in a web browser to verify that the SSL certificate is working correctly.

Congratulations! You have successfully installed Let's Encrypt SSL in Nginx on Rocky Linux 9.