<p>Let’s Encrypt is a free SSL provider. Porkbun is very good domain registrar. We can download free SSL from porkbun dashboard. All we need is to upload it into our VPS server and need to add the path of the certificates into virtual host file.</p>



<p>Download SSL from porkbun.</p>



<div class="wp-block-image"><figure class="aligncenter size-large"><img src="http://ec2-13-127-91-65.ap-south-1.compute.amazonaws.com/wp-content/uploads/2020/07/porkbun-1024x617.jpg" alt="" class="wp-image-702"/></figure></div>



<p>You shall get a ZIP file containing the following 4 files:-</p>



<ol><li>domain.cert.pem</li><li>intermediate.cert.pem</li><li>private.key.pem</li><li>public.key.pem</li></ol>



<p>Now Upload file no. 1 and 3 only (i.e. domain.cert.pem and private.key.pem) into your VPS home folder (i.e. /home/admin/).</p>



<p>Create a Virtual Host for your domain (for example: yourdomain.com) as shown below:</p>



<pre class="wp-block-code"><code>sudo nano /etc/nginx/sites-available/wbxpress.net.conf</code></pre>



<pre class="wp-block-code"><code>server {
    server_name    yourdomain.com www.yourdomain.com;
    root           /var/www/yourdomain;
    index          index.html index.php;

    location / {
        try_files $uri $uri/ /index.php?$args;
    }

    location ~* \.php$ {
        fastcgi_pass unix:/run/php/php7.2-fpm.sock;
        include         fastcgi_params;
        fastcgi_param   SCRIPT_FILENAME    $document_root$fastcgi_script_name;
        fastcgi_param   SCRIPT_NAME        $fastcgi_script_name;
    }

    listen 443 ssl http2;
    listen &#91;::]:443 ssl http2;

    ssl_certificate /home/admin/domain.cert.pem;
    ssl_certificate_key /home/admin/private.key.pem;	
}
server {
    if ($host = www.yourdomain.com) {
        return 301 https://yourdomain.net$request_uri;
    }
    if ($host = yourdomain.com) {
        return 301 https://yourdomain.net$request_uri;
    }
    listen 80;
    listen &#91;::]:80;
    server_name yourdomain.com www.yourdomain.com;
    return 404;
}</code></pre>



<p>Also, we need to replace SSL settings as found from <a href="https://mozilla.github.io/server-side-tls/ssl-config-generator/" target="_blank" rel="noreferrer noopener">SSL Config File Generator</a> at nginx.conf file.</p>



<pre class="wp-block-code"><code>sudo nano /etc/nginx/nginx.conf</code></pre>



<pre class="wp-block-preformatted">ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers 'ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS';
ssl_prefer_server_ciphers on;</pre>



<p>The above configuration works perfectly well in our case.</p>

Let’s Encrypt is a free SSL provider. Porkbun is very good domain registrar. We can download free SSL from porkbun dashboard. All we need is to u...

How to Install a Porkbun SSL on NGINX - TCMHACK

How to Install a Porkbun SSL on NGINX

<p>NGINX is a powerful and widely used for web server. It also used as frontend proxy server for multiple web application servers runs behind this. This tutorial will help you to setup your Nginx server as fronted proxy server for your Node.js application.</p>



<h2>1. Install Node.js</h2>



<p>First install the required packages for node.js installation and add PPA of nodejs available on launchpad. Afer that install nodejs with following commands.</p>



<pre class="wp-block-preformatted">$ sudo apt-get install python-software-properties python g++ make
$ sudo add-apt-repository ppa:chris-lea/node.js
$ sudo apt-get update
$ sudo apt-get install nodejs
</pre>



<h2>2. Install Nginx</h2>



<p>Now install Nginx web server using apt-get. Nginx is available under default repositories.</p>



<pre class="wp-block-preformatted">$ sudo apt-get install nginx
</pre>



<h2>4. Create Test Node Server</h2>



<p>Now create a test node server app and run it on port 3000 on host 127.0.0.1. To create a node server create file&nbsp;<strong>~/MyApp/myapp.js</strong>&nbsp;.</p>



<pre class="wp-block-preformatted">$ cd ~/MyApp/
$ vi myapp.js
</pre>



<p>and add following content in javascript file.</p>



<pre class="wp-block-preformatted">var http = require('http');

http.createServer(function (req, res) {
    res.writeHead(200, {'Content-Type': 'text/plain'});
    res.end('Hello Worldn');
}).listen(3000, "127.0.0.1");
console.log('Server running at http://127.0.0.1:3000/');

</pre>



<p>Now use the following command to start nodejs in background</p>



<pre class="wp-block-preformatted">$ node myapp.js &amp;
</pre>



<p>and access this in browser. You will see result like below screenshot.</p>



<div class="wp-block-image"><figure class="aligncenter"><img src="http://ec2-13-127-91-65.ap-south-1.compute.amazonaws.com/wp-content/uploads/2019/05/nginx-with-nodejs-1.png" alt="" class="wp-image-382"/></figure></div>



<h2>4. Configure NGINX</h2>



<p>After starting a demo server with node.js. Now start configuration with Nginx. Create a virtual host configuration file for your domain under<strong>&nbsp;/etc/nginx/conf.d/</strong>&nbsp;directory.</p>



<pre class="wp-block-preformatted">$ sudo vim /etc/nginx/conf.d/example.com.conf
</pre>



<p>and add the following content.</p>



<pre class="wp-block-preformatted">upstream myapp {
    server 127.0.0.1:3000;
    keepalive 8;
}

# the nginx server instance
server {
    listen 0.0.0.0:80;
    server_name example.com www.example.com;
    access_log /var/log/nginx/example.com.log;

    location / {
      proxy_set_header X-Real-IP $remote_addr;
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
      proxy_set_header Host $http_host;
      proxy_set_header X-NginX-Proxy true;

      proxy_pass http://myapp/;
      proxy_redirect off;
    }
 }

</pre>



<p>After making all configuration, let’s restart Nginx web server using following command.</p>



<pre class="wp-block-preformatted">$ sudo /etc/init.d/nginx restart
</pre>



<h2>5. Verify Setup</h2>



<p>Now access your server using domain name, you will see the same page shows on&nbsp;<strong>http://127.0.0.1:3000/</strong>&nbsp;.</p>



<div class="wp-block-image"><figure class="aligncenter"><img src="http://ec2-13-127-91-65.ap-south-1.compute.amazonaws.com/wp-content/uploads/2019/05/nginx-with-nodejs-2.png" alt="" class="wp-image-383"/></figure></div>

NGINX is a powerful and widely used for web server. It also used as frontend proxy server for multiple web application servers runs behind this. ...

How to Install a Porkbun SSL on NGINX

How to Setup Nginx as Frontend Server for Node.js