Nginx Configs

My personal server's nginx configs, optimized for HTTPS and HTTP2

Install

sudo apt install nginx
sudo apt install certbot python-certbot-nginx
sudo certbot --nginx certonly

Then copy nginx configs to your server's /etc/nginx folder

ln -s /etc/nginx/sites-available/example.com.conf /etc/nginx/sites-enabled/example.com.conf

Change the server_name: example.com and root /home/ritchie/www/example.com of server to yours.

Test

sudo nginx -t
sudo nginx reload

Test and change your configs until it's OK ✅.

Renew

If certificate is getting expired in next 30 days, certbot will renew certificates automatically.

Credits

• Let’s Encrypt
• Certbot
• server-configs-nginx
• SSL Server Test
• HTTP Security Report
• Mozilla SSL Configuration Generator
• CSP Evaluator
• CSP Generator
• 内容安全策略