Let's Encrypt

Overview

Let's Encrypt provides free, automated TLS certificates. Certbot is the official client — obtains and renews certificates automatically. Supports Nginx, Apache, standalone, and DNS validation for wildcards.

Instructions

Step 1: Install Certbot

sudo apt install certbot python3-certbot-nginx

Step 2: Get Certificate

# Automatic Nginx configuration
sudo certbot --nginx -d example.com -d www.example.com