[VESTACP - PART 8] SSL TO DOMAIN IN VESTACP WITH LET'S ENCRYPT

In this series we have a tutorial on how to install SSL for free with Let's Encrypt for your hostname to be able to go to the admin page with https without error. In this article, I will guide you to install SSL certificates for other domains in VestaCP, any website of the user. And of course, to do that you will need to access the server via SSH as root.

Add and index domain for VestaCP before installation Let's Encrypt can only be created when the domain you have access to the server. So you want to add domain, add the domain name to VestaCP and point to the server first. STEP 1. CREATE LET'S ENCRYPT You review the installation steps Let's Encrypt in the creation of SSL for the VestaCP administration page, this only refers to the creation step only. We need to stop the Apache and NGINX applications running on the server. And be sure to Lets Encrypt on: yum install git -y git clone https://github.com/letsencrypt/letsencrypt / opt / le cd / opt / le We run the following command to create the SSL certificate for the domain to create. / opt / le / letsencrypt-auto certonly --standalone -d domain.com And do not forget that it automatically renews the certificate by typing crontab -e and inserting the following into the bottom to automatically renew every 90 days: * / 90 * * / opt / le / letsencrypt-auto renew> / dev / null 2> & 1 Then opening the /etc/letsencrypt/live/domain.com directory will have the following files: cert.pem, chain.pem, fullchain.pem and privkey.pem. Now edit the domain you need to add SSL in VestaCP, check the SSL Support section and get the contents of the newly created certificate files as follows: cat /etc/letsencrypt/live/domain.com/cert.pem Copy the content to the SSL Certificate. cat /etc/letsencrypt/live/domain.com/privkey.pem Copy the contents to the SSL Key. cat /etc/letsencrypt/live/domain.com/fullchain.pem Copy the contents into the SSL Certificate Authority / Intermediate. Save and restart VestaCP. service vesta restart Now you can access your domain via the https://domain.com protocol.