This tools has been only tested on debian 8 and nginx 1.6.2. Other version have not been tested.
- nginx >= 1.6
- OpenSSL
- CertBot
- Create www root folder
- Create http configuration
- .well-known folder for Let's Encrypt
- redirect to https
- Create https configuration
- .well-known folder for Let's Encrypt
- Diffie-Hellman 4098 bytes
- Only TLS 1.2
- Activate http configuration
- Request Let's Encrypt certificate
- Activate https configuration
- Enjoy !
Don't forget to renew regulary Let's Encrypt certificates. https://certbot.eff.org/docs/using.html#renewing-certificates
./generate.sh [host] [proxy url]
Example
./generate.sh foo.bar.com http://bar.foo.com:81