How to Secure Nginx with Lets Encrypt on Ubuntu 20.04 with Certbot?

Поделиться
HTML-код
  • Опубликовано: 5 окт 2024

Комментарии • 139

  • @AntonPutra
    @AntonPutra  Год назад +1

    🔴 - To support my channel, I’d like to offer Mentorship/On-the-Job Support/Consulting - me@antonputra.com

  • @douglasvalerio8880
    @douglasvalerio8880 2 года назад +9

    This is by far the most complete example I've found on this subject, thanks for sharing

  • @abdullahaathif291
    @abdullahaathif291 2 года назад +3

    Perfect tutorial! Installed on my instance along with the video, now my site is encrypted! You are just awesome Anton. Love from Sri Lanka

  • @CalpachinoMrcroner
    @CalpachinoMrcroner 11 месяцев назад +1

    THANKK YOUUUUUU I LOVE YOU I TOOK 16 HOURS WATCHING USELESS TUTORIALS USING OUTDATED NGINX THAT NEVER WORKED BUT YOURS WAS AMAZING THANK YOU

    • @AntonPutra
      @AntonPutra  11 месяцев назад

      Thanks Cronerstat!

  • @lewisbrowne8799
    @lewisbrowne8799 5 месяцев назад +1

    been scratching my head at this for days can't believe its that simple, thanks Anton!

  • @Aidennification
    @Aidennification 2 года назад +3

    Perfect tutorial! Only snag I ran into after installing the test certificates was the request timing out. Turns out, I hadn't enabled port forwarding on port 443, so be sure to double check!

    • @AntonPutra
      @AntonPutra  2 года назад +1

      Thanks!

    • @darn2926
      @darn2926 Год назад

      Hello i think am having this issue , can you tell me how to resolve it. Thanks in advance

  • @sankalpmukim1052
    @sankalpmukim1052 Год назад +1

    God Tier Video! Teaches wayy more than in the title! SUperb in best practices!

  • @MM-nj4im
    @MM-nj4im 4 месяца назад +2

    Best explanation straight to the point, thanks!

  • @dwiwahyudi9698
    @dwiwahyudi9698 7 месяцев назад

    I liked your video 3000 times, hahaha...
    Thank you very much for this tutorial, it is the most perfect tutorial for certbot and nginx, it really saves me a lot of time. I'll be sure to watch your other videos.

  • @OPPACHblu_channel
    @OPPACHblu_channel 7 месяцев назад

    Thanks for the video, exactly what was I looking for. Short and detailed 👍👍👍

  • @julesverne2125
    @julesverne2125 2 года назад +1

    Thanks for video. in other tutorials no one told about include sites-enabled to nginx.conf

  • @savejshaikh3996
    @savejshaikh3996 6 месяцев назад +1

    Thank you................
    You made my day. perfect to the point. just follow along and it will work.

  • @Gwen-mw3rs
    @Gwen-mw3rs 2 года назад

    This is super amazing video !!! It was so difficult to get ssl from other blogs or youtube . this is simple and perfect thanks a lot

  • @eddieespinal8326
    @eddieespinal8326 Год назад +1

    Great video!, exactly what I was looking for. Thank you!

  • @danyalutsevich
    @danyalutsevich Год назад

    TTL measures not in seconds
    it is the maximum number of redirects that can occur while your packets go from server to your computer

    • @AntonPutra
      @AntonPutra  Год назад

      thanks for the feedback, but I don't remember where in the video I used that phrase =)

  • @sergiboquerafuentes7134
    @sergiboquerafuentes7134 2 года назад +1

    You are my hero bro! you saved my day. Thanks for the amazing content

  • @HardWorker-p8w
    @HardWorker-p8w 8 месяцев назад +1

    Бро, красава лучший! Просто тигррр! Всё четко и понятно, еще и ссылку на команды оставил просто легенда!

  • @AntonPutra
    @AntonPutra  3 года назад +4

    ⏱️TIMESTAMPS⏱️
    0:00 Intro
    1:01 Create EC2 Instance in AWS Ubuntu 20.04 LTS
    3:39 Install Nginx Ubuntu 20.04 LTS
    6:06 Nginx Setup Server Block
    9:25 Install Certbot on Ubuntu 20.04 LTS
    10:23 Secure Nginx with Lets Encrypt on Ubuntu 20.04 LTS

  • @ryanmckenna2047
    @ryanmckenna2047 Год назад +1

    Really well explained thanks bunches!

  • @tonya3570
    @tonya3570 Год назад +1

    excellent detailed tutorial, thanks!👍

  • @humanityasascience1324
    @humanityasascience1324 Год назад +1

    amazing video, thank you for this!

  • @darkmerlin8870
    @darkmerlin8870 23 дня назад +1

    Thank You very much!!

  • @AbhishekSingh-cg3fx
    @AbhishekSingh-cg3fx 9 месяцев назад +1

    thanks for sharing this

  • @sureshkoppisetty6862
    @sureshkoppisetty6862 2 года назад +1

    Thank you Anton.....
    great video, its helped me lot......
    quick question : Can i secure the domain which hosted internally with certbot ? if yes, pls tell me how....

    • @AntonPutra
      @AntonPutra  2 года назад

      Thanks, no you can't use certbot for private domains. You need to create your own CA and issue certificates for your domains.

  • @lovekushtari
    @lovekushtari Год назад +1

    Perfect Video. Thanks 🙌🙌

  • @mukulrana1616
    @mukulrana1616 2 года назад +1

    Great tutorial. Thank you!

  • @imedkharrat3754
    @imedkharrat3754 11 месяцев назад

    big thank men , god bless youu

  • @lofiuwu
    @lofiuwu Месяц назад +1

    Updating to the latest stable version doesn't seem to be something we can do in ubuntu server 24+. It errors with needing a libs1 dependency which seems insecure to download. However I'm able to install the legacy version of nginx without an issue.

  • @the_stoned_investor
    @the_stoned_investor 10 дней назад

    Really nice job thanks!

  • @horseprofesseur7648
    @horseprofesseur7648 3 года назад +1

    helped me a lot, thank you!!

  • @nikhilkrishna9740
    @nikhilkrishna9740 2 года назад +1

    Thank you. This video helped me.

  • @akshaypant8883
    @akshaypant8883 3 года назад +1

    Waiting for customer support slack app with node.js 🤗👍

  • @sumanthsai4015
    @sumanthsai4015 2 года назад +1

    Hi Anton, if possible please try to use certbot to install certificate on a private ec2 instance where nginx is installed

    • @AntonPutra
      @AntonPutra  2 года назад

      private means no internet access or you have NAT?

    • @sumanthsai4015
      @sumanthsai4015 2 года назад

      @@AntonPutra using alb , iam doing installation of nginx into private ec2.for that I need ssl

  • @sereose
    @sereose 3 года назад +1

    No infrastructure as a code ? :) Thank you for great work!

    • @AntonPutra
      @AntonPutra  3 года назад +1

      Thanks, I hope by Thursday I'll make one, EKS + Secrets Manager :)

  • @JS-vw7to
    @JS-vw7to 4 месяца назад +1

    Amazing explanation

  • @AntonPutra
    @AntonPutra  Год назад +1

    👉 How to Manage Secrets in Terraform - ruclips.net/video/3N0tGKwvBdA/видео.html
    👉 Terraform Tips & Tricks - ruclips.net/video/7S94oUTy2z4/видео.html
    👉 ArgoCD Tutorial - ruclips.net/video/zGndgdGa1Tc/видео.html

  • @Fayaz-Rehman
    @Fayaz-Rehman 3 года назад +1

    Great - Thank you for sharing.

  • @hasanerken9604
    @hasanerken9604 3 года назад +1

    Great video and explanation, thanks

  • @hamitkamberi4134
    @hamitkamberi4134 2 года назад

    It helped me a lot thank you !

  • @hemantharajanvenkatesan8220
    @hemantharajanvenkatesan8220 2 года назад +1

    Really thank you for this video

  • @jakubvala4345
    @jakubvala4345 3 года назад +1

    Hi Anton, thanks for the video, it's really helpfull. One question though, is it possible to run it like you did on a linux server with docker/docker-compose?

    • @AntonPutra
      @AntonPutra  3 года назад

      Yes, absolutely. Just mount the volume with the cert location to the docker container. If you run docker use '-v' flag or with compose "volumes".

  • @noscopedemon4308
    @noscopedemon4308 Месяц назад

    When I type "sudo apt install nginx=1.20.1-1~focal" I get the error:
    Reading package lists... Done
    Building dependency tree... Done
    Reading state information... Done
    Some packages could not be installed. This may mean that you have
    requested an impossible situation or if you are using the unstable
    distribution that some required packages have not yet been created
    or been moved out of Incoming.
    The following information may help to resolve the situation:
    The following packages have unmet dependencies:
    nginx : Depends: libssl1.1 (>= 1.1.1) but it is not installable
    E: Unable to correct problems, you have held broken packages.
    Even if I type "sudo apt install nginx," I am getting the error:
    The following information may help to resolve the situation:
    The following packages have unmet dependencies:
    nginx : Depends: libssl1.1 (>= 1.1.1) but it is not installable
    E: Unable to correct problems, you have held broken packages.
    what do I do, kindly help.

    • @AntonPutra
      @AntonPutra  Месяц назад

      try to instal the latest nginx package that is available without setting the version

  • @marcioantoniodefreitasjuni5684
    @marcioantoniodefreitasjuni5684 Год назад +1

    Really helped me!!

  • @fizzwithnorizzz
    @fizzwithnorizzz 2 года назад

    Really helpful, thank you so much!

  • @user-yr7cu9cl2k
    @user-yr7cu9cl2k Год назад +1

    THANK YOUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU❤❤❤❤

  • @habibicoding
    @habibicoding Год назад

    Great video!

  • @qwertyqwerty7101
    @qwertyqwerty7101 2 года назад +1

    many thanks!

  • @barakadewise7200
    @barakadewise7200 7 месяцев назад

    served my day

  • @issahalabi99
    @issahalabi99 11 месяцев назад +1

    Thanks

  • @craigrooney5459
    @craigrooney5459 2 года назад +1

    great tutorial.

  • @josefu-san
    @josefu-san 4 месяца назад +1

    ❤❤❤❤🔥🔥

  • @InverserPro
    @InverserPro 2 года назад +1

    Thank u, братик)

  • @salmanifrahim3245
    @salmanifrahim3245 3 года назад +1

    thank you!

  • @dileepnagendra8199
    @dileepnagendra8199 Год назад +1

    Great

  • @rajusah3376
    @rajusah3376 2 года назад

    How to connect nodejs app running on port 3000 & 3001 to subdomain api & hello respectively ?

    • @AntonPutra
      @AntonPutra  2 года назад

      you can forward to any backend service and any port, you can declare it in nginx conf

  • @ahmedhaggag8360
    @ahmedhaggag8360 Год назад

    can you help me , i getting this error
    i use ubuntu 20.04
    error: system does not fully support snapd: cannot mount squashfs image
    using "squashfs"

    • @AntonPutra
      @AntonPutra  Год назад

      I think in new ubuntu releases they deprecated snap packages, try pip or apt
      sudo apt install python3-pip
      sudo -H pip3 install certbot
      askubuntu.com/questions/1278936/install-certbot-on-ubuntu-20-04

  • @sandimuhamad7920
    @sandimuhamad7920 Год назад

    Cool, btw are u from indonesia?

    • @AntonPutra
      @AntonPutra  Год назад +1

      nope, but i hear that a lot =)

  • @DolevDublon
    @DolevDublon 4 месяца назад +1

    good!

  • @LukeHwarang
    @LukeHwarang 10 месяцев назад

    What if I don't use port 80? Can I configure certbot with another port? (Ex: port 8022)?

    • @AntonPutra
      @AntonPutra  10 месяцев назад

      As far as I remember, you can pass the HTTP-01 challenge only by using the standard port 80. However, I think it's possible with the DNS-01 challenge.

  • @EwertonDutra
    @EwertonDutra 2 года назад

    Hi, I need make backup something, to make a install new ?

    • @AntonPutra
      @AntonPutra  2 года назад +1

      you can clone your existing nginx config for selected endpoint just in case if you want to restore

  • @edwinvarghese
    @edwinvarghese 2 года назад

    Hey thanks for the tutorial.
    Followed the same steps. but after adding the ssl certificate, website went down. I tried restarting nginx, enabled firewall with https nginx 443. But its still down.
    Anyone else faced similar issue?

    • @AntonPutra
      @AntonPutra  2 года назад

      can you check if the nginx process is running? maybe you have errors, check the log

    • @edwinvarghese
      @edwinvarghese 2 года назад

      @@AntonPutra nginx is running. errors from error.log -> signal process started and info from access.log -> "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) . I guess its trying to redirect the request to http. (website was up and running when it was in http (when no ssl was added)). Now ufw is disabled as well.

    • @edwinvarghese
      @edwinvarghese 2 года назад +1

      @@AntonPutra problem was that port 443 was not open in ec2 security group. Now its working. Again, many many thanks.

    • @Ramkumar-yd6eq
      @Ramkumar-yd6eq Год назад

      After installing it successfully,it is running but if i do docker-compose up it failing showing let'sencrypt not found.plz guide me to resolve this.

  • @yoskokleng3658
    @yoskokleng3658 6 месяцев назад

    for google manage domain, Only your browser can access with that domain name or everyone also can access it? I am confusing that we can make our domain for free instead of buy for Hosting provider. thanks

    • @AntonPutra
      @AntonPutra  6 месяцев назад +1

      Google domains is public host provider, but you still need to register your domain with someone on the internet. It cannot be free

    • @yoskokleng3658
      @yoskokleng3658 6 месяцев назад

      Seems you have very good knowledge with Linux command. Have you make a tutorial about it? Thanks@@AntonPutra

  • @harshpatel105
    @harshpatel105 Год назад

    thanks a lot

  • @jeffalomaniacemail2956
    @jeffalomaniacemail2956 Год назад +1

    still great help today, thank you

  • @treshongriffin4161
    @treshongriffin4161 2 года назад

    how do i save when i get to the deb and deb-src? im stuck there and trying to code pokt nodes and need help

    • @AntonPutra
      @AntonPutra  2 года назад

      1. Press Esc
      2. Type :x
      3. Press Enter

    • @AntonPutra
      @AntonPutra  2 года назад

      or you can use nano text editor, it maybe easier

    • @treshongriffin4161
      @treshongriffin4161 2 года назад

      @@AntonPutra do you have discord? i need some help

    • @AntonPutra
      @AntonPutra  2 года назад

      @@treshongriffin4161 I do - discord.gg/Wy5SPDSTjX
      you can describe the problem, I'll take a look later tonight

  • @moamab4541
    @moamab4541 9 месяцев назад

    I just want to ask if this is a localhost or not

  • @doganozgurmoroy9010
    @doganozgurmoroy9010 Год назад

    Umbeliveble...

  • @matyasmarkkovacs8336
    @matyasmarkkovacs8336 Год назад

    Does it enable HSTS?

    • @AntonPutra
      @AntonPutra  Год назад +1

      well, it does create redirect from 80 to 443, i don't remember about the header part. You can check in the server block

  • @YuraPrimyshev
    @YuraPrimyshev Год назад +1

    Четко! Ёклмн

  • @Никита-п4м2е
    @Никита-п4м2е Год назад

    норм

  • @iHate2x
    @iHate2x Год назад

    My domain is connected with the server ip, using ping on the domain pings the server ip as expected. But when go to domain via browser it doesn't show the html, instead i get "connection refused" error

    • @AntonPutra
      @AntonPutra  Год назад

      looks like the server is not running. Check with "nc -vz " for example "nc -vz google.com 80"

  • @claudioooliveira
    @claudioooliveira Год назад +1

    Great tutorial!! Thank you