AlmaLinux 9

How to Install Let's Encrypt SSL in Nginx on AlmaLinux 9

To install Let's Encrypt SSL on AlmaLinux 9 with Nginx, follow these steps:

Step 1 : Ensure Your Domain is Set Up

Make sure your domain is properly pointed to your server's IP address so that Let's Encrypt can verify it.

Step 2 : Update Your System

Run the following command to update your system packages:

sudo dnf update -y

Step 3 : Install Certbot and the Nginx Plugin

Install Certbot and the necessary Nginx plugin:

sudo dnf install certbot python3-certbot-nginx -y

Step 4 : Create and Configure Nginx Virtual Host

Create a new Nginx configuration file for your domain:

sudo nano /etc/nginx/conf.d/example.devtutorial.io.conf

Add the following content:

server {
    listen 80;
    server_name example.devtutorial.io;

    root /var/www/example.devtutorial.io;
    index index.html;

    location / {
        try_files $uri $uri/ =404;
    }
}

Save the file and exit.

Step 5 : Create the Website Directory and an Index File

sudo mkdir -p /var/www/example.devtutorial.io
echo "<h1>Welcome to example.devtutorial.io</h1>" | sudo tee /var/www/example.devtutorial.io/index.html

Set the correct ownership:

sudo chown -R nginx:nginx /var/www/example.devtutorial.io
sudo chmod -R 755 /var/www/example.devtutorial.io

Step 6 : Configure SELinux (If Enabled)

If SELinux is enabled, run:

sudo semanage fcontext -a -t httpd_sys_rw_content_t "/var/www/example.devtutorial.io(/.*)?"
sudo restorecon -R /var/www/example.devtutorial.io

Step 7 : Test Nginx Configuration

Run the following command to check for syntax errors:

sudo nginx -t

If everything is fine, you should see syntax is ok and test is successful.

Step 8 : Restart Nginx

Apply the changes by restarting Nginx:

sudo systemctl restart nginx

Step 9 : Obtain SSL Certificate

Run Certbot to obtain and install the SSL certificate:

sudo certbot --nginx -d example.devtutorial.io

Follow the prompts:

- Enter your email address

- Agree to the terms of service (y)

- Choose whether to share your email (y or n)

Once the process completes, you should see a success message indicating that SSL has been installed.

Step 10 : Test SSL Renewal

To check if auto-renewal is working, run:

sudo certbot renew --dry-run

Step 11 : Verify the Installation

Open your browser and visit https://example.devtutorial.io to check if the SSL certificate is properly installed.

Congratulations! You have successfully installed Let's Encrypt SSL on AlmaLinux 9 with Nginx.