{"id":2360,"date":"2016-04-23T21:15:05","date_gmt":"2016-04-23T14:15:05","guid":{"rendered":"https:\/\/engineerball.com\/?p=2360"},"modified":"2016-04-23T21:22:35","modified_gmt":"2016-04-23T14:22:35","slug":"how-to-use-ssl-with-lesencrypt-and-nginx-on-ubuntu-16-04","status":"publish","type":"post","link":"https:\/\/engineerball.com\/blog\/2016\/04\/23\/how-to-use-ssl-with-lesencrypt-and-nginx-on-ubuntu-16-04.html","title":{"rendered":"\u0e43\u0e0a\u0e49\u0e07\u0e32\u0e19 ssl certificate \u0e43\u0e2b\u0e49\u0e01\u0e31\u0e1a nginx \u0e1f\u0e23\u0e35\u0e46 \u0e14\u0e49\u0e27\u0e22 letsencrypt.org \u0e1a\u0e19 Ubuntu 16.04"},"content":{"rendered":"<p>\u0e17\u0e38\u0e01\u0e27\u0e31\u0e19\u0e19\u0e35\u0e49\u0e01\u0e32\u0e23\u0e1c\u0e25\u0e31\u0e01\u0e14\u0e31\u0e19\u0e43\u0e2b\u0e49\u0e17\u0e38\u0e01\u0e40\u0e27\u0e1b\u0e44\u0e0b\u0e15\u0e4c\u0e44\u0e14\u0e49\u0e21\u0e35\u0e01\u0e32\u0e23\u0e43\u0e0a\u0e49\u0e07\u0e32\u0e19 HTTPS \u0e44\u0e14\u0e49\u0e21\u0e35\u0e01\u0e32\u0e23\u0e01\u0e23\u0e30\u0e15\u0e38\u0e49\u0e19\u0e2b\u0e25\u0e32\u0e22\u0e17\u0e32\u0e07 \u0e0b\u0e36\u0e48\u0e07\u0e21\u0e35\u0e0a\u0e48\u0e2d\u0e07\u0e17\u0e32\u0e07\u0e19\u0e36\u0e07\u0e17\u0e35\u0e48\u0e17\u0e32\u0e07\u0e1c\u0e39\u0e49\u0e43\u0e2b\u0e49\u0e1a\u0e23\u0e34\u0e01\u0e32\u0e23\u0e19\u0e31\u0e49\u0e19\u0e43\u0e2b\u0e49\u0e40\u0e23\u0e32\u0e2a\u0e23\u0e49\u0e32\u0e07 SSL Certificate \u0e44\u0e1b\u0e43\u0e0a\u0e49\u0e43\u0e19\u0e40\u0e27\u0e1b\u0e44\u0e0b\u0e15\u0e4c\u0e02\u0e2d\u0e07\u0e40\u0e23\u0e32\u0e44\u0e14\u0e49\u0e1f\u0e23\u0e35\u0e46 \u0e41\u0e15\u0e48\u0e21\u0e35\u0e02\u0e49\u0e2d\u0e08\u0e33\u0e01\u0e31\u0e14\u0e19\u0e34\u0e14\u0e2b\u0e19\u0e48\u0e2d\u0e22\u0e04\u0e37\u0e2d\u0e08\u0e30\u0e21\u0e35\u0e2d\u0e32\u0e22\u0e38\u0e2d\u0e22\u0e39\u0e48\u0e44\u0e14\u0e49\u0e41\u0e04\u0e48 90 \u0e27\u0e31\u0e19\u0e19\u0e31\u0e1a\u0e15\u0e31\u0e49\u0e07\u0e41\u0e15\u0e48\u0e27\u0e31\u0e19\u0e17\u0e35\u0e48\u0e44\u0e14\u0e49\u0e02\u0e2d\u0e01\u0e32\u0e23\u0e43\u0e0a\u0e49\u0e07\u0e32\u0e19<br \/>\n\u0e14\u0e31\u0e07\u0e19\u0e31\u0e49\u0e19\u0e01\u0e47\u0e40\u0e1b\u0e47\u0e19\u0e1c\u0e25\u0e14\u0e35\u0e01\u0e31\u0e1a\u0e1c\u0e39\u0e49\u0e43\u0e0a\u0e49\u0e07\u0e32\u0e19\u0e2d\u0e22\u0e48\u0e32\u0e07\u0e40\u0e23\u0e32\u0e17\u0e35\u0e48\u0e08\u0e30\u0e2a\u0e32\u0e21\u0e32\u0e23\u0e16\u0e43\u0e2b\u0e49\u0e1a\u0e23\u0e34\u0e01\u0e32\u0e23\u0e40\u0e27\u0e1b\u0e44\u0e0b\u0e15\u0e4c\u0e1c\u0e48\u0e32\u0e19\u0e17\u0e32\u0e07 HTTP Secure Layer \u0e44\u0e14\u0e49\u0e41\u0e1a\u0e1a\u0e44\u0e21\u0e48\u0e15\u0e49\u0e2d\u0e07\u0e40\u0e2a\u0e35\u0e22\u0e40\u0e07\u0e34\u0e19\u0e04\u0e23\u0e31\u0e1a \u0e42\u0e14\u0e22\u0e1c\u0e21\u0e44\u0e14\u0e49\u0e19\u0e33\u0e21\u0e32\u0e43\u0e0a\u0e49\u0e01\u0e31\u0e1a nginx \u0e0b\u0e36\u0e48\u0e07\u0e40\u0e1b\u0e47\u0e19 web server \u0e01\u0e47\u0e2a\u0e32\u0e21\u0e32\u0e23\u0e16\u0e17\u0e33\u0e44\u0e14\u0e49\u0e40\u0e0a\u0e48\u0e19\u0e01\u0e31\u0e19\u0e44\u0e21\u0e48\u0e21\u0e35\u0e1b\u0e31\u0e0d\u0e2b\u0e32<\/p>\n<h2>\u0e2d\u0e31\u0e19\u0e14\u0e31\u0e1a\u0e41\u0e23\u0e01\u0e43\u0e2b\u0e49\u0e15\u0e34\u0e14\u0e15\u0e31\u0e49\u0e07 nginx \u0e41\u0e25\u0e30 git \u0e01\u0e48\u0e2d\u0e19<\/h2>\n<pre lang=\"bash\">$ sudo apt-get update\r\n$ sudo apt-get install -y nginx git\r\n$ sudo git clone https:\/\/github.com\/letsencrypt\/letsencrypt \/opt\/letsencrypt\r\n$ cd \/opt\/letsencrypt\r\n$ sudo .\/letsencrypt-auto<\/pre>\n<p>\u0e0b\u0e36\u0e48\u0e07\u0e08\u0e30\u0e40\u0e1b\u0e47\u0e19\u0e01\u0e32\u0e23\u0e15\u0e34\u0e14\u0e15\u0e31\u0e49\u0e07 nginx \u0e17\u0e35\u0e48\u0e40\u0e1b\u0e47\u0e19 web server \u0e41\u0e25\u0e30 git \u0e40\u0e1e\u0e37\u0e48\u0e2d\u0e43\u0e0a\u0e49\u0e43\u0e19\u0e01\u0e32\u0e23 clone code repository \u0e21\u0e32\u0e08\u0e32\u0e01 letencrypt<\/p>\n<p>\u0e2a\u0e23\u0e49\u0e32\u0e07 Template \u0e2a\u0e33\u0e2b\u0e23\u0e31\u0e1a request ssl \u0e44\u0e1b\u0e22\u0e31\u0e07 letsencrypt.org<\/p>\n<pre>$ cd \/var\/www\r\n$ mkdir letsencrypt\r\n$ sudo chgrp www-data letsencrypt\r\n<\/pre>\n<h2>\u0e2a\u0e23\u0e49\u0e32\u0e07 template file<\/h2>\n<p>\u0e17\u0e35\u0e48 \/etc\/letsencrypt\/configs\/<strong>devcloud.engineerball.com<\/strong>.conf \u0e42\u0e14\u0e22\u0e21\u0e35\u0e40\u0e19\u0e37\u0e49\u0e2d\u0e2b\u0e32\u0e44\u0e1f\u0e25\u0e4c\u0e14\u0e31\u0e07\u0e19\u0e35\u0e49 (\u0e40\u0e1b\u0e25\u0e35\u0e48\u0e22\u0e19 devcloud.engineerball.com \u0e40\u0e1b\u0e47\u0e19\u0e0a\u0e37\u0e48\u0e2d\u0e42\u0e14\u0e40\u0e21\u0e19\u0e17\u0e35\u0e48\u0e15\u0e49\u0e2d\u0e07\u0e01\u0e32\u0e23\u0e43\u0e0a\u0e49\u0e07\u0e32\u0e19)<\/p>\n<pre># the domain we want to get the cert for;\r\n# technically it's possible to have multiple of this lines, but it only worked\r\n# with one domain for me, another one only got one cert, so I would recommend\r\n# separate config files per domain.\r\ndomains = <strong>devcloud.engineerball.com<\/strong>\r\n# increase key size\r\nrsa-key-size = 2048 # Or 4096\r\n# the current closed beta (as of 2015-Nov-07) is using this server\r\nserver = https:\/\/acme-v01.api.letsencrypt.org\/directory\r\n# this address will receive renewal reminders\r\nemail = <strong>admin@engineerball.com<\/strong>\r\n# turn off the ncurses UI, we want this to be run as a cronjob\r\ntext = True\r\n# authenticate by placing a file in the webroot (under .well-known\/acme-challenge\/)\r\n# and then letting LE fetch it\r\nauthenticator = webroot\r\nwebroot-path = \/var\/www\/letsencrypt\/<\/pre>\n<p>\u0e15\u0e23\u0e07\u0e15\u0e31\u0e27\u0e2b\u0e19\u0e32\u0e43\u0e2b\u0e49\u0e40\u0e1b\u0e25\u0e35\u0e48\u0e22\u0e19\u0e40\u0e1b\u0e47\u0e19\u0e02\u0e2d\u0e07\u0e15\u0e31\u0e27\u0e40\u0e2d\u0e07\u0e19\u0e30\u0e04\u0e23\u0e31\u0e1a<\/p>\n<h2>\u0e40\u0e1b\u0e34\u0e14\u0e43\u0e2b\u0e49 letsencrypt \u0e40\u0e02\u0e49\u0e32\u0e16\u0e36\u0e07\u0e44\u0e1f\u0e25\u0e4c temporary<\/h2>\n<p>\u0e42\u0e14\u0e22\u0e01\u0e32\u0e23\u0e40\u0e1e\u0e34\u0e48\u0e21 config \u0e43\u0e19\u0e2a\u0e48\u0e27\u0e19\u0e02\u0e2d\u0e07 location \u0e40\u0e02\u0e49\u0e32\u0e44\u0e1b \u0e15\u0e31\u0e27\u0e2d\u0e22\u0e48\u0e32\u0e07\u0e40\u0e0a\u0e48\u0e19<\/p>\n<pre>server {\r\nlisten 80 default_server;\r\nserver_name devcloud.engineerball.com;\r\n<strong>location \/.well-known\/acme-challenge {<\/strong>\r\n<strong> root \/var\/www\/letsencrypt;<\/strong>\r\n<strong> }<\/strong>\r\n...\r\n}\r\n<\/pre>\n<p>\u0e17\u0e33\u0e01\u0e32\u0e23 verify \u0e41\u0e25\u0e30 reload nginx<\/p>\n<pre><code class=\"terminal\">$ sudo nginx -t &amp;&amp; sudo nginx -s reload<\/code><\/pre>\n<h2>\u0e02\u0e2d Certificate<\/h2>\n<pre><code class=\"terminal\">$ cd \/opt\/letsencrypt\r\n$ sudo .\/letsencrypt-auto --config \/etc\/letsencrypt\/configs\/<em><strong>devcloud.engineerball.com<\/strong><\/em>.conf certonly\r\nRequesting root privileges to run letsencrypt...\r\n   \/home\/teerapat_khu\/.local\/share\/letsencrypt\/bin\/letsencrypt --config \/etc\/letsencrypt\/configs\/devcloud.engineerball.com.conf certonly\r\nIMPORTANT NOTES:\r\n - Congratulations! Your certificate and chain have been saved at\r\n   \/etc\/letsencrypt\/live\/devcloud.engineerball.com\/fullchain.pem. Your\r\n   cert will expire on 2016-07-22. To obtain a new version of the\r\n   certificate in the future, simply run Let's Encrypt again.\r\n - If you like Let's Encrypt, please consider supporting our work by:\r\n   Donating to ISRG \/ Let's Encrypt:   https:\/\/letsencrypt.org\/donate\r\n   Donating to EFF:                    https:\/\/eff.org\/donate-le\r\n<\/code><\/pre>\n<p>\u0e40\u0e1e\u0e34\u0e48\u0e21 nginx config \u0e43\u0e19\u0e2a\u0e48\u0e27\u0e19\u0e02\u0e2d\u0e07 ssl<\/p>\n<pre>server {\r\nlisten 443 ssl default_server;\r\nserver_name devcloud.engineerball.com;\r\n<strong>\r\nssl_certificate \/etc\/letsencrypt\/live\/devcloud.engineerball.com\/fullchain.pem;\r\nssl_certificate_key \/etc\/letsencrypt\/live\/devcloud.engineerball.com\/privkey.pem;\r\n<\/strong>\r\n...\r\n}\r\n<\/pre>\n<p>reload config \u0e02\u0e2d\u0e07 nginx<\/p>\n<pre>$ sudo nginx -t &amp;&amp; sudo nginx -s reload<\/pre>\n<p>\u0e2b\u0e25\u0e31\u0e07\u0e08\u0e32\u0e01\u0e19\u0e31\u0e49\u0e19\u0e25\u0e2d\u0e07\u0e40\u0e02\u0e49\u0e32\u0e40\u0e27\u0e1b\u0e14\u0e39 \u0e08\u0e30\u0e40\u0e2b\u0e47\u0e19\u0e27\u0e48\u0e32\u0e40\u0e23\u0e32\u0e2a\u0e32\u0e21\u0e32\u0e23\u0e16\u0e43\u0e0a\u0e49 https \u0e41\u0e1a\u0e1a\u0e1f\u0e23\u0e35\u0e46 \u0e44\u0e14\u0e49\u0e41\u0e25\u0e49\u0e27 (\u0e2a\u0e31\u0e0d\u0e25\u0e31\u0e01\u0e29\u0e13\u0e4c\u0e23\u0e39\u0e1b\u0e01\u0e38\u0e0d\u0e41\u0e08\u0e08\u0e30\u0e40\u0e1b\u0e47\u0e19\u0e2a\u0e35\u0e40\u0e02\u0e35\u0e22\u0e27)<\/p>\n<p><a href=\"https:\/\/engineerball.com\/wp-content\/uploads\/2016\/04\/1.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-medium wp-image-2362\" src=\"https:\/\/engineerball.com\/wp-content\/uploads\/2016\/04\/1-744x204.png\" alt=\"1\" width=\"744\" height=\"204\" srcset=\"https:\/\/engineerball.com\/blog\/wp-content\/uploads\/2016\/04\/1-744x204.png 744w, https:\/\/engineerball.com\/blog\/wp-content\/uploads\/2016\/04\/1-420x115.png 420w, https:\/\/engineerball.com\/blog\/wp-content\/uploads\/2016\/04\/1-768x210.png 768w, https:\/\/engineerball.com\/blog\/wp-content\/uploads\/2016\/04\/1-700x192.png 700w, https:\/\/engineerball.com\/blog\/wp-content\/uploads\/2016\/04\/1.png 1150w\" sizes=\"(max-width: 744px) 100vw, 744px\" \/><\/a><\/p>\n<h2>\u0e15\u0e48\u0e2d\u0e2d\u0e32\u0e22\u0e38\u0e01\u0e32\u0e23\u0e43\u0e0a\u0e49\u0e07\u0e32\u0e19\u0e41\u0e1a\u0e1a\u0e2d\u0e31\u0e15\u0e42\u0e19\u0e21\u0e31\u0e15\u0e34<\/h2>\n<p>\u0e2d\u0e22\u0e48\u0e32\u0e07\u0e17\u0e35\u0e48\u0e1a\u0e2d\u0e01\u0e44\u0e1b\u0e15\u0e2d\u0e19\u0e41\u0e23\u0e01\u0e04\u0e23\u0e31\u0e1a letsencrypt \u0e43\u0e2b\u0e49\u0e40\u0e23\u0e32\u0e43\u0e0a\u0e49\u0e07\u0e32\u0e19\u0e44\u0e14\u0e49\u0e41\u0e04\u0e48 90 \u0e27\u0e31\u0e19\u0e40\u0e17\u0e48\u0e32\u0e19\u0e31\u0e49\u0e19 \u0e41\u0e15\u0e48\u0e16\u0e36\u0e07\u0e22\u0e31\u0e07\u0e44\u0e07\u0e41\u0e25\u0e49\u0e27 letsencrypt \u0e01\u0e47\u0e22\u0e31\u0e07\u0e43\u0e08\u0e14\u0e35\u0e17\u0e35\u0e48\u0e43\u0e2b\u0e49\u0e40\u0e23\u0e32\u0e2a\u0e32\u0e21\u0e32\u0e23\u0e02\u0e2d renew \u0e17\u0e38\u0e01\u0e46 90 \u0e27\u0e31\u0e19\u0e44\u0e14\u0e49 \u0e14\u0e31\u0e07\u0e19\u0e31\u0e49\u0e19\u0e01\u0e47\u0e2a\u0e32\u0e21\u0e32\u0e23\u0e16\u0e15\u0e31\u0e49\u0e07 crontab \u0e43\u0e19\u0e01\u0e32\u0e23 renew \u0e44\u0e14\u0e49\u0e40\u0e25\u0e22<br \/>\n1. \u0e2a\u0e23\u0e49\u0e32\u0e07\u0e44\u0e1f\u0e25\u0e4c\u0e17\u0e35\u0e48 \/var\/scripts\/renew-letsencrypt.sh<\/p>\n<pre>#!\/bin\/sh\r\ncd \/opt\/letsencrypt\/\r\n.\/letsencrypt-auto --config \/etc\/letsencrypt\/configs\/devcloud.engineerball.com.conf certonly\r\n\r\nif [ $? -ne 0 ]\r\n then\r\n        ERRORLOG=`tail \/var\/log\/letsencrypt\/letsencrypt.log`\r\n        echo -e \"The Let's Encrypt cert has not been renewed! \\n \\n\" \\\r\n                 $ERRORLOG\r\n else\r\n        nginx -s reload\r\nfi\r\n\r\nexit 0\r\n<\/pre>\n<p>2. \u0e2a\u0e23\u0e49\u0e32\u0e07\u0e17\u0e35\u0e48\u0e40\u0e01\u0e47\u0e1a log file<br \/>\n<code>$ sudo mkdir \/var\/log\/letsencrypt<\/code><\/p>\n<p>3. \u0e15\u0e31\u0e49\u0e07 crontab \u0e14\u0e49\u0e27\u0e22\u0e04\u0e48\u0e32<br \/>\n<code>0 0 1 JAN,MAR,MAY,JUL,SEP,NOV * \/path\/to\/renew-letsencrypt.sh<\/code><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u0e17\u0e38\u0e01\u0e27\u0e31\u0e19\u0e19\u0e35\u0e49\u0e01\u0e32\u0e23\u0e1c\u0e25\u0e31\u0e01\u0e14\u0e31\u0e19\u0e43\u0e2b\u0e49\u0e17\u0e38\u0e01\u0e40\u0e27\u0e1b\u0e44\u0e0b\u0e15\u0e4c\u0e44\u0e14\u0e49\u0e21\u0e35\u0e01\u0e32\u0e23\u0e43\u0e0a\u0e49\u0e07\u0e32\u0e19 HTTPS \u0e44\u0e14\u0e49\u0e21\u0e35\u0e01\u0e32\u0e23\u0e01\u0e23\u0e30\u0e15\u0e38\u0e49\u0e19\u0e2b\u0e25\u0e32\u0e22\u0e17\u0e32\u0e07 \u0e0b\u0e36\u0e48\u0e07\u0e21\u0e35\u0e0a\u0e48\u0e2d\u0e07\u0e17\u0e32\u0e07\u0e19\u0e36\u0e07\u0e17\u0e35\u0e48\u0e17\u0e32\u0e07\u0e1c\u0e39\u0e49\u0e43\u0e2b\u0e49\u0e1a\u0e23\u0e34\u0e01\u0e32\u0e23\u0e19\u0e31\u0e49\u0e19\u0e43\u0e2b\u0e49\u0e40\u0e23\u0e32\u0e2a\u0e23\u0e49\u0e32\u0e07 SSL Certificate \u0e44\u0e1b\u0e43\u0e0a\u0e49\u0e43\u0e19\u0e40\u0e27\u0e1b\u0e44\u0e0b\u0e15\u0e4c\u0e02\u0e2d\u0e07\u0e40\u0e23\u0e32\u0e44\u0e14\u0e49\u0e1f\u0e23\u0e35\u0e46 \u0e41\u0e15\u0e48\u0e21\u0e35\u0e02\u0e49\u0e2d\u0e08\u0e33\u0e01\u0e31\u0e14\u0e19\u0e34\u0e14\u0e2b\u0e19\u0e48\u0e2d\u0e22\u0e04\u0e37\u0e2d\u0e08\u0e30\u0e21\u0e35\u0e2d\u0e32\u0e22\u0e38\u0e2d\u0e22\u0e39\u0e48\u0e44\u0e14\u0e49\u0e41\u0e04\u0e48 90 \u0e27\u0e31\u0e19\u0e19\u0e31\u0e1a\u0e15\u0e31\u0e49\u0e07\u0e41\u0e15\u0e48\u0e27\u0e31\u0e19\u0e17\u0e35\u0e48\u0e44\u0e14\u0e49\u0e02\u0e2d\u0e01\u0e32\u0e23\u0e43\u0e0a\u0e49\u0e07\u0e32\u0e19 \u0e14\u0e31\u0e07\u0e19\u0e31\u0e49\u0e19\u0e01\u0e47\u0e40\u0e1b\u0e47\u0e19\u0e1c\u0e25\u0e14\u0e35\u0e01\u0e31\u0e1a\u0e1c\u0e39\u0e49\u0e43\u0e0a\u0e49\u0e07\u0e32\u0e19\u0e2d\u0e22\u0e48\u0e32\u0e07\u0e40\u0e23\u0e32\u0e17\u0e35\u0e48\u0e08\u0e30\u0e2a\u0e32\u0e21\u0e32\u0e23\u0e16\u0e43\u0e2b\u0e49\u0e1a\u0e23\u0e34\u0e01\u0e32\u0e23\u0e40\u0e27\u0e1b\u0e44\u0e0b\u0e15\u0e4c\u0e1c\u0e48\u0e32\u0e19\u0e17\u0e32\u0e07 HTTP Secure Layer \u0e44\u0e14\u0e49\u0e41\u0e1a\u0e1a\u0e44\u0e21\u0e48\u0e15\u0e49\u0e2d\u0e07\u0e40\u0e2a\u0e35\u0e22\u0e40\u0e07\u0e34\u0e19\u0e04\u0e23\u0e31\u0e1a&#8230;<\/p>\n<div class=\"more-link-wrapper\"><a class=\"more-link\" href=\"https:\/\/engineerball.com\/blog\/2016\/04\/23\/how-to-use-ssl-with-lesencrypt-and-nginx-on-ubuntu-16-04.html\">Read the post<span class=\"screen-reader-text\">\u0e43\u0e0a\u0e49\u0e07\u0e32\u0e19 ssl certificate \u0e43\u0e2b\u0e49\u0e01\u0e31\u0e1a nginx \u0e1f\u0e23\u0e35\u0e46 \u0e14\u0e49\u0e27\u0e22 letsencrypt.org \u0e1a\u0e19 Ubuntu 16.04<\/span><\/a><\/div>\n","protected":false},"author":1,"featured_media":2367,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false}}},"categories":[11,12],"tags":[107,382,302,381],"jetpack_publicize_connections":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.4 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>\u0e43\u0e0a\u0e49\u0e07\u0e32\u0e19 ssl certificate \u0e43\u0e2b\u0e49\u0e01\u0e31\u0e1a nginx \u0e1f\u0e23\u0e35\u0e46 \u0e14\u0e49\u0e27\u0e22 letsencrypt.org \u0e1a\u0e19 Ubuntu 16.04 - EngineerBALL<\/title>\n<meta name=\"description\" content=\"\u0e43\u0e0a\u0e49 https ssl certificate \u0e1a\u0e19 nginx \u0e14\u0e49\u0e27\u0e22 letsencrypt.org \u0e41\u0e1a\u0e1a\u0e1f\u0e23\u0e35\u0e46 \u0e17\u0e33\u0e40\u0e2d\u0e07\u0e01\u0e47\u0e44\u0e14\u0e49\u0e07\u0e48\u0e32\u0e22\u0e08\u0e31\u0e07 \u0e1f\u0e23\u0e35\u0e14\u0e49\u0e27\u0e22\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/engineerball.com\/blog\/2016\/04\/23\/how-to-use-ssl-with-lesencrypt-and-nginx-on-ubuntu-16-04.html\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u0e43\u0e0a\u0e49\u0e07\u0e32\u0e19 ssl certificate \u0e43\u0e2b\u0e49\u0e01\u0e31\u0e1a nginx \u0e1f\u0e23\u0e35\u0e46 \u0e14\u0e49\u0e27\u0e22 letsencrypt.org \u0e1a\u0e19 Ubuntu 16.04 - EngineerBALL\" \/>\n<meta property=\"og:url\" content=\"https:\/\/engineerball.com\/blog\/2016\/04\/23\/how-to-use-ssl-with-lesencrypt-and-nginx-on-ubuntu-16-04.html\" \/>\n<meta property=\"og:site_name\" content=\"EngineerBALL\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/engineerball\" \/>\n<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/troueblemaker.khunpech?ref=tn_tnmn\" \/>\n<meta property=\"article:published_time\" content=\"2016-04-23T14:15:05+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2016-04-23T14:22:35+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/engineerball.com\/blog\/wp-content\/uploads\/2016\/04\/Untitled-1.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"900\" \/>\n\t<meta property=\"og:image:height\" content=\"540\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"ball\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@engineerball\" \/>\n<meta name=\"twitter:site\" content=\"@engineerball\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"ball\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/engineerball.com\/blog\/2016\/04\/23\/how-to-use-ssl-with-lesencrypt-and-nginx-on-ubuntu-16-04.html\",\"url\":\"https:\/\/engineerball.com\/blog\/2016\/04\/23\/how-to-use-ssl-with-lesencrypt-and-nginx-on-ubuntu-16-04.html\",\"name\":\"\u0e43\u0e0a\u0e49\u0e07\u0e32\u0e19 ssl certificate \u0e43\u0e2b\u0e49\u0e01\u0e31\u0e1a nginx \u0e1f\u0e23\u0e35\u0e46 \u0e14\u0e49\u0e27\u0e22 letsencrypt.org \u0e1a\u0e19 Ubuntu 16.04 - EngineerBALL\",\"isPartOf\":{\"@id\":\"https:\/\/engineerball.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/engineerball.com\/blog\/2016\/04\/23\/how-to-use-ssl-with-lesencrypt-and-nginx-on-ubuntu-16-04.html#primaryimage\"},\"image\":{\"@id\":\"https:\/\/engineerball.com\/blog\/2016\/04\/23\/how-to-use-ssl-with-lesencrypt-and-nginx-on-ubuntu-16-04.html#primaryimage\"},\"thumbnailUrl\":\"https:\/\/engineerball.com\/blog\/wp-content\/uploads\/2016\/04\/Untitled-1.jpg\",\"datePublished\":\"2016-04-23T14:15:05+00:00\",\"dateModified\":\"2016-04-23T14:22:35+00:00\",\"author\":{\"@id\":\"https:\/\/engineerball.com\/blog\/#\/schema\/person\/415320d0da2d392375528001aa6ea53e\"},\"description\":\"\u0e43\u0e0a\u0e49 https ssl certificate \u0e1a\u0e19 nginx \u0e14\u0e49\u0e27\u0e22 letsencrypt.org \u0e41\u0e1a\u0e1a\u0e1f\u0e23\u0e35\u0e46 \u0e17\u0e33\u0e40\u0e2d\u0e07\u0e01\u0e47\u0e44\u0e14\u0e49\u0e07\u0e48\u0e32\u0e22\u0e08\u0e31\u0e07 \u0e1f\u0e23\u0e35\u0e14\u0e49\u0e27\u0e22\",\"breadcrumb\":{\"@id\":\"https:\/\/engineerball.com\/blog\/2016\/04\/23\/how-to-use-ssl-with-lesencrypt-and-nginx-on-ubuntu-16-04.html#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/engineerball.com\/blog\/2016\/04\/23\/how-to-use-ssl-with-lesencrypt-and-nginx-on-ubuntu-16-04.html\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/engineerball.com\/blog\/2016\/04\/23\/how-to-use-ssl-with-lesencrypt-and-nginx-on-ubuntu-16-04.html#primaryimage\",\"url\":\"https:\/\/engineerball.com\/blog\/wp-content\/uploads\/2016\/04\/Untitled-1.jpg\",\"contentUrl\":\"https:\/\/engineerball.com\/blog\/wp-content\/uploads\/2016\/04\/Untitled-1.jpg\",\"width\":900,\"height\":540},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/engineerball.com\/blog\/2016\/04\/23\/how-to-use-ssl-with-lesencrypt-and-nginx-on-ubuntu-16-04.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/engineerball.com\/blog\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u0e43\u0e0a\u0e49\u0e07\u0e32\u0e19 ssl certificate \u0e43\u0e2b\u0e49\u0e01\u0e31\u0e1a nginx \u0e1f\u0e23\u0e35\u0e46 \u0e14\u0e49\u0e27\u0e22 letsencrypt.org \u0e1a\u0e19 Ubuntu 16.04\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/engineerball.com\/blog\/#website\",\"url\":\"https:\/\/engineerball.com\/blog\/\",\"name\":\"EngineerBALL\",\"description\":\"Damn Those Sweet Memories\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/engineerball.com\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/engineerball.com\/blog\/#\/schema\/person\/415320d0da2d392375528001aa6ea53e\",\"name\":\"ball\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/engineerball.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/d8d00c01f55942d7c8f2dbc70a9cefe0?s=96&d=monsterid&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/d8d00c01f55942d7c8f2dbc70a9cefe0?s=96&d=monsterid&r=g\",\"caption\":\"ball\"},\"description\":\"Teerapat Khunpech Live, Tech, Beers, Bike, Cafe Racer, Docker, Devops, Eco-System\",\"sameAs\":[\"https:\/\/engineerball.com\",\"https:\/\/www.facebook.com\/troueblemaker.khunpech?ref=tn_tnmn\",\"https:\/\/twitter.com\/engineerball\"],\"url\":\"https:\/\/engineerball.com\/blog\/author\/ball\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"\u0e43\u0e0a\u0e49\u0e07\u0e32\u0e19 ssl certificate \u0e43\u0e2b\u0e49\u0e01\u0e31\u0e1a nginx \u0e1f\u0e23\u0e35\u0e46 \u0e14\u0e49\u0e27\u0e22 letsencrypt.org \u0e1a\u0e19 Ubuntu 16.04 - EngineerBALL","description":"\u0e43\u0e0a\u0e49 https ssl certificate \u0e1a\u0e19 nginx \u0e14\u0e49\u0e27\u0e22 letsencrypt.org \u0e41\u0e1a\u0e1a\u0e1f\u0e23\u0e35\u0e46 \u0e17\u0e33\u0e40\u0e2d\u0e07\u0e01\u0e47\u0e44\u0e14\u0e49\u0e07\u0e48\u0e32\u0e22\u0e08\u0e31\u0e07 \u0e1f\u0e23\u0e35\u0e14\u0e49\u0e27\u0e22","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/engineerball.com\/blog\/2016\/04\/23\/how-to-use-ssl-with-lesencrypt-and-nginx-on-ubuntu-16-04.html","og_locale":"en_US","og_type":"article","og_title":"\u0e43\u0e0a\u0e49\u0e07\u0e32\u0e19 ssl certificate \u0e43\u0e2b\u0e49\u0e01\u0e31\u0e1a nginx \u0e1f\u0e23\u0e35\u0e46 \u0e14\u0e49\u0e27\u0e22 letsencrypt.org \u0e1a\u0e19 Ubuntu 16.04 - EngineerBALL","og_url":"https:\/\/engineerball.com\/blog\/2016\/04\/23\/how-to-use-ssl-with-lesencrypt-and-nginx-on-ubuntu-16-04.html","og_site_name":"EngineerBALL","article_publisher":"https:\/\/www.facebook.com\/engineerball","article_author":"https:\/\/www.facebook.com\/troueblemaker.khunpech?ref=tn_tnmn","article_published_time":"2016-04-23T14:15:05+00:00","article_modified_time":"2016-04-23T14:22:35+00:00","og_image":[{"width":900,"height":540,"url":"https:\/\/engineerball.com\/blog\/wp-content\/uploads\/2016\/04\/Untitled-1.jpg","type":"image\/jpeg"}],"author":"ball","twitter_card":"summary_large_image","twitter_creator":"@engineerball","twitter_site":"@engineerball","twitter_misc":{"Written by":"ball","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/engineerball.com\/blog\/2016\/04\/23\/how-to-use-ssl-with-lesencrypt-and-nginx-on-ubuntu-16-04.html","url":"https:\/\/engineerball.com\/blog\/2016\/04\/23\/how-to-use-ssl-with-lesencrypt-and-nginx-on-ubuntu-16-04.html","name":"\u0e43\u0e0a\u0e49\u0e07\u0e32\u0e19 ssl certificate \u0e43\u0e2b\u0e49\u0e01\u0e31\u0e1a nginx \u0e1f\u0e23\u0e35\u0e46 \u0e14\u0e49\u0e27\u0e22 letsencrypt.org \u0e1a\u0e19 Ubuntu 16.04 - EngineerBALL","isPartOf":{"@id":"https:\/\/engineerball.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/engineerball.com\/blog\/2016\/04\/23\/how-to-use-ssl-with-lesencrypt-and-nginx-on-ubuntu-16-04.html#primaryimage"},"image":{"@id":"https:\/\/engineerball.com\/blog\/2016\/04\/23\/how-to-use-ssl-with-lesencrypt-and-nginx-on-ubuntu-16-04.html#primaryimage"},"thumbnailUrl":"https:\/\/engineerball.com\/blog\/wp-content\/uploads\/2016\/04\/Untitled-1.jpg","datePublished":"2016-04-23T14:15:05+00:00","dateModified":"2016-04-23T14:22:35+00:00","author":{"@id":"https:\/\/engineerball.com\/blog\/#\/schema\/person\/415320d0da2d392375528001aa6ea53e"},"description":"\u0e43\u0e0a\u0e49 https ssl certificate \u0e1a\u0e19 nginx \u0e14\u0e49\u0e27\u0e22 letsencrypt.org \u0e41\u0e1a\u0e1a\u0e1f\u0e23\u0e35\u0e46 \u0e17\u0e33\u0e40\u0e2d\u0e07\u0e01\u0e47\u0e44\u0e14\u0e49\u0e07\u0e48\u0e32\u0e22\u0e08\u0e31\u0e07 \u0e1f\u0e23\u0e35\u0e14\u0e49\u0e27\u0e22","breadcrumb":{"@id":"https:\/\/engineerball.com\/blog\/2016\/04\/23\/how-to-use-ssl-with-lesencrypt-and-nginx-on-ubuntu-16-04.html#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/engineerball.com\/blog\/2016\/04\/23\/how-to-use-ssl-with-lesencrypt-and-nginx-on-ubuntu-16-04.html"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/engineerball.com\/blog\/2016\/04\/23\/how-to-use-ssl-with-lesencrypt-and-nginx-on-ubuntu-16-04.html#primaryimage","url":"https:\/\/engineerball.com\/blog\/wp-content\/uploads\/2016\/04\/Untitled-1.jpg","contentUrl":"https:\/\/engineerball.com\/blog\/wp-content\/uploads\/2016\/04\/Untitled-1.jpg","width":900,"height":540},{"@type":"BreadcrumbList","@id":"https:\/\/engineerball.com\/blog\/2016\/04\/23\/how-to-use-ssl-with-lesencrypt-and-nginx-on-ubuntu-16-04.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/engineerball.com\/blog"},{"@type":"ListItem","position":2,"name":"\u0e43\u0e0a\u0e49\u0e07\u0e32\u0e19 ssl certificate \u0e43\u0e2b\u0e49\u0e01\u0e31\u0e1a nginx \u0e1f\u0e23\u0e35\u0e46 \u0e14\u0e49\u0e27\u0e22 letsencrypt.org \u0e1a\u0e19 Ubuntu 16.04"}]},{"@type":"WebSite","@id":"https:\/\/engineerball.com\/blog\/#website","url":"https:\/\/engineerball.com\/blog\/","name":"EngineerBALL","description":"Damn Those Sweet Memories","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/engineerball.com\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/engineerball.com\/blog\/#\/schema\/person\/415320d0da2d392375528001aa6ea53e","name":"ball","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/engineerball.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/d8d00c01f55942d7c8f2dbc70a9cefe0?s=96&d=monsterid&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d8d00c01f55942d7c8f2dbc70a9cefe0?s=96&d=monsterid&r=g","caption":"ball"},"description":"Teerapat Khunpech Live, Tech, Beers, Bike, Cafe Racer, Docker, Devops, Eco-System","sameAs":["https:\/\/engineerball.com","https:\/\/www.facebook.com\/troueblemaker.khunpech?ref=tn_tnmn","https:\/\/twitter.com\/engineerball"],"url":"https:\/\/engineerball.com\/blog\/author\/ball"}]}},"jetpack_featured_media_url":"https:\/\/engineerball.com\/blog\/wp-content\/uploads\/2016\/04\/Untitled-1.jpg","jetpack_shortlink":"https:\/\/wp.me\/p3Nmbl-C4","jetpack_sharing_enabled":true,"jetpack_likes_enabled":true,"jetpack-related-posts":[],"_links":{"self":[{"href":"https:\/\/engineerball.com\/blog\/wp-json\/wp\/v2\/posts\/2360"}],"collection":[{"href":"https:\/\/engineerball.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/engineerball.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/engineerball.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/engineerball.com\/blog\/wp-json\/wp\/v2\/comments?post=2360"}],"version-history":[{"count":0,"href":"https:\/\/engineerball.com\/blog\/wp-json\/wp\/v2\/posts\/2360\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/engineerball.com\/blog\/wp-json\/wp\/v2\/media\/2367"}],"wp:attachment":[{"href":"https:\/\/engineerball.com\/blog\/wp-json\/wp\/v2\/media?parent=2360"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/engineerball.com\/blog\/wp-json\/wp\/v2\/categories?post=2360"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/engineerball.com\/blog\/wp-json\/wp\/v2\/tags?post=2360"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}