Create certifiacate
Create RSA key (2048K) and certificate.
openssl req -x509 -nodes -days 365 -newkey rsa:2048 \
-keyout /etc/ssl/ondrejsika.key \
-out /etc/ssl/ondrejsika.crt \
-subj '/O=Ondrej Sika/CN=ondrejsika.com'
Nginx config for HTTPS server
server {
listen 443;
ssl on;
ssl_certificate /etc/ssl/ondrejsika.crt;
ssl_certificate_key /etc/ssl/ondrejsika.key;
server_name ondrejsika.com www.ondrejsika.com;
location / {
alias /var/www/ondrejsika/;
index index.html;
}
}
Redirect form HTTP
server {
server_name ondrejsika.com www.ondrejsika.com;
listen 80;
rewrite ^(.*) https://ondrejsika.com$request_uri? permanent;
}
and restart nginx
sudo service nginx restart
Apache2 configuration
Enable mod SSL
sudo a2enmod ssl
HTTPS config
<VirtualHost *:443>
ServerName ondrejsika.com
ServerAlias www.ondrejsika.com
DocumentRoot "/home/www/"
SSLEngine on
SSLCertificateFile /etc/ssl/ondrejsika.crt
SSLCertificateKeyFile /etc/ssl/ondrejsika.key
</VirtualHost>
Redirect from HTTP
Must enable mod rewrite
sudo a2enmod rewrite
<VirtualHost *:80>
ServerName localhost
RewriteEngine On
RewriteRule ^/(.*) https://%{SERVER_NAME}/$1 [L,R]
</VirtualHost>
and restart apache2
sudo service apach2 restart