{"id":1394,"date":"2016-03-23T15:20:51","date_gmt":"2016-03-23T08:20:51","guid":{"rendered":"https:\/\/kusumotolab.com\/?p=1394"},"modified":"2016-03-23T15:20:51","modified_gmt":"2016-03-23T08:20:51","slug":"%e0%b8%a7%e0%b8%b4%e0%b8%98%e0%b8%b5%e0%b8%97%e0%b8%b3-nginx-https-reverse-proxy-%e0%b9%81%e0%b8%a5%e0%b8%b0%e0%b8%95%e0%b8%b4%e0%b8%94%e0%b8%95%e0%b8%b1%e0%b9%89%e0%b8%87-ssl-certificate-%e0%b8%88","status":"publish","type":"post","link":"https:\/\/oldblog.kusumotolab.com\/?p=1394","title":{"rendered":"\u0e27\u0e34\u0e18\u0e35\u0e17\u0e33 nginx https Reverse Proxy \u0e41\u0e25\u0e30\u0e15\u0e34\u0e14\u0e15\u0e31\u0e49\u0e07 SSL Certificate \u0e08\u0e32\u0e01 Let&#8217;s Encrypt \u0e41\u0e1a\u0e1a\u0e07\u0e48\u0e32\u0e22\u0e46\u0e1a\u0e19 Debian\/Ubuntu"},"content":{"rendered":"<p>\u0e17\u0e35\u0e48\u0e08\u0e23\u0e34\u0e07\u0e2d\u0e22\u0e32\u0e01\u0e08\u0e30\u0e40\u0e02\u0e35\u0e22\u0e19\u0e40\u0e23\u0e37\u0e48\u0e2d\u0e07\u0e19\u0e35\u0e49\u0e40\u0e2d\u0e32\u0e44\u0e27\u0e49\u0e2a\u0e31\u0e01\u0e1e\u0e31\u0e01\u0e41\u0e2b\u0e25\u0e30 \u0e40\u0e1e\u0e23\u0e32\u0e30\u0e15\u0e34\u0e14\u0e1b\u0e31\u0e0d\u0e2b\u0e32\u0e19\u0e35\u0e49\u0e2d\u0e22\u0e39\u0e48\u0e1e\u0e2d\u0e14\u0e35\u0e23\u0e30\u0e2b\u0e27\u0e48\u0e32\u0e07\u0e01\u0e32\u0e23\u0e22\u0e49\u0e32\u0e22 Server \u0e44\u0e1b\u0e22\u0e31\u0e07\u0e1c\u0e39\u0e49\u0e43\u0e2b\u0e49\u0e1a\u0e23\u0e34\u0e01\u0e32\u0e23 Iass \u0e23\u0e32\u0e22\u0e43\u0e2b\u0e21\u0e48 \u0e40\u0e1b\u0e47\u0e19\u0e01\u0e32\u0e23\u0e2a\u0e23\u0e49\u0e32\u0e07 Instance \u0e40\u0e04\u0e23\u0e37\u0e48\u0e2d\u0e07\u0e40\u0e14\u0e35\u0e22\u0e27 \u0e43\u0e19\u0e40\u0e04\u0e23\u0e37\u0e48\u0e2d\u0e07\u0e19\u0e31\u0e49\u0e19\u0e1b\u0e23\u0e30\u0e01\u0e2d\u0e1a\u0e44\u0e1b\u0e14\u0e49\u0e27\u0e22 Docker Container \u0e15\u0e32\u0e21\u0e42\u0e1b\u0e23\u0e40\u0e08\u0e47\u0e04\u0e17\u0e35\u0e48\u0e17\u0e33\u0e07\u0e32\u0e19\u0e2d\u0e22\u0e39\u0e48 \u0e16\u0e37\u0e2d\u0e27\u0e48\u0e32\u0e43\u0e0a\u0e49\u0e07\u0e32\u0e19\u0e40\u0e21\u0e47\u0e14\u0e40\u0e07\u0e34\u0e19\u0e43\u0e2b\u0e49\u0e04\u0e38\u0e49\u0e21\u0e04\u0e48\u0e32\u0e41\u0e25\u0e49\u0e27\u0e01\u0e31\u0e19 \u0e17\u0e35\u0e19\u0e35\u0e49\u0e08\u0e33\u0e40\u0e1b\u0e47\u0e19\u0e15\u0e49\u0e2d\u0e07\u0e17\u0e33 Reverse Proxy \u0e40\u0e1e\u0e37\u0e48\u0e2d Forward \u0e15\u0e48\u0e2d\u0e40\u0e02\u0e49\u0e32\u0e44\u0e1b\u0e43\u0e19 Container \u0e17\u0e35\u0e48\u0e21\u0e35 Web Application \u0e2d\u0e22\u0e39\u0e48 + \u0e2d\u0e22\u0e32\u0e01\u0e44\u0e14\u0e49 SSL \u0e41\u0e1a\u0e1a\u0e40\u0e02\u0e35\u0e22\u0e27\u0e46 \u0e44\u0e21\u0e48\u0e41\u0e14\u0e07\u0e1e\u0e2d\u0e14\u0e35 \u0e40\u0e25\u0e22\u0e2b\u0e32\u0e27\u0e34\u0e18\u0e35\u0e17\u0e33\u0e41\u0e25\u0e30\u0e21\u0e32\u0e1a\u0e2d\u0e01\u0e01\u0e25\u0e48\u0e32\u0e27\u0e01\u0e31\u0e19\u0e04\u0e23\u0e31\u0e1a \u0e40\u0e2d\u0e32\u0e2b\u0e25\u0e48\u0e30 \u0e1c\u0e21\u0e08\u0e30\u0e40\u0e25\u0e48\u0e32\u0e43\u0e2b\u0e49\u0e1f\u0e31\u0e07\u0e40\u0e1b\u0e47\u0e19\u0e02\u0e31\u0e49\u0e19\u0e46\u0e44\u0e1b\u0e19\u0e30\u0e04\u0e23\u0e31\u0e1a<\/p>\n<h2>\u0e15\u0e34\u0e14\u0e15\u0e31\u0e49\u0e07 Package \u0e17\u0e35\u0e48\u0e08\u0e33\u0e40\u0e1b\u0e47\u0e19\u0e01\u0e48\u0e2d\u0e19\u0e01\u0e32\u0e23\u0e15\u0e34\u0e14\u0e15\u0e31\u0e49\u0e07<\/h2>\n<p>\u0e40\u0e23\u0e32\u0e08\u0e30\u0e15\u0e49\u0e2d\u0e07\u0e15\u0e34\u0e14\u0e15\u0e31\u0e49\u0e07 Package \u0e17\u0e35\u0e48\u0e08\u0e30\u0e43\u0e0a\u0e49\u0e43\u0e19\u0e01\u0e32\u0e23\u0e15\u0e34\u0e14\u0e15\u0e31\u0e49\u0e07\u0e01\u0e48\u0e2d\u0e19 \u0e42\u0e14\u0e22 Package \u0e1e\u0e27\u0e01\u0e19\u0e35\u0e49\u0e08\u0e30\u0e43\u0e0a\u0e49\u0e43\u0e19\u0e01\u0e32\u0e23\u0e14\u0e36\u0e07\u0e15\u0e31\u0e27\u0e15\u0e34\u0e14\u0e15\u0e31\u0e49\u0e07\u00a0Let&#8217;s Encrypt \u0e21\u0e32\u0e08\u0e32\u0e01 Repository \u0e42\u0e14\u0e22\u0e43\u0e0a\u0e49\u0e04\u0e33\u0e2a\u0e31\u0e48\u0e07\u0e19\u0e35\u0e49<\/p>\n<pre lang=\"bash\">apt-get -y install git bc<\/pre>\n<p>\u0e2b\u0e25\u0e31\u0e07\u0e08\u0e32\u0e01\u0e19\u0e31\u0e49\u0e19 \u0e43\u0e2b\u0e49\u0e17\u0e33\u0e01\u0e32\u0e23 Clone Project Let&#8217;s Encrypt \u0e21\u0e32\u0e08\u0e32\u0e01 github \u0e41\u0e25\u0e30\u0e1a\u0e31\u0e19\u0e17\u0e36\u0e01\u0e25\u0e07\u0e43\u0e19 Path \/opt\/letsencrypt \u0e42\u0e14\u0e22\u0e43\u0e0a\u0e49\u0e04\u0e33\u0e2a\u0e31\u0e48\u0e07<\/p>\n<pre lang=\"bash\">git clone https:\/\/github.com\/letsencrypt\/letsencrypt \/opt\/letsencrypt<\/pre>\n<p>\u0e2b\u0e25\u0e31\u0e07\u0e08\u0e32\u0e01\u0e01\u0e32\u0e23 Clone \u0e40\u0e2a\u0e23\u0e47\u0e08\u0e2a\u0e34\u0e49\u0e19 \u0e15\u0e31\u0e27\u0e15\u0e34\u0e14\u0e15\u0e31\u0e49\u0e07 Let&#8217;s Encrypt \u0e08\u0e30\u0e2d\u0e22\u0e39\u0e48\u0e43\u0e19 Path \/opt\/letsencrypt<\/p>\n<h2>\u0e15\u0e34\u0e14\u0e15\u0e31\u0e49\u0e07 Nginx<\/h2>\n<p>\u0e40\u0e23\u0e32\u0e08\u0e30\u0e17\u0e33\u0e01\u0e32\u0e23\u0e15\u0e34\u0e14\u0e15\u0e31\u0e49\u0e07 Nginx \u0e42\u0e14\u0e22\u0e43\u0e0a\u0e49\u0e04\u0e33\u0e2a\u0e31\u0e48\u0e07<\/p>\n<pre lang=\"bash\">apt-get -y install nginx<\/pre>\n<p>\u0e2b\u0e25\u0e31\u0e07\u0e08\u0e32\u0e01\u0e15\u0e34\u0e14\u0e15\u0e31\u0e49\u0e07 Nginx \u0e40\u0e2a\u0e23\u0e47\u0e08\u0e41\u0e25\u0e49\u0e27 \u0e43\u0e2b\u0e49\u0e40\u0e02\u0e49\u0e32\u0e44\u0e1b\u0e41\u0e01\u0e49\u0e44\u0e02\u0e44\u0e1f\u0e25\u0e4c Configuration \u0e2a\u0e33\u0e2b\u0e23\u0e31\u0e1a\u0e17\u0e33 Virtual Host (\u0e2b\u0e23\u0e37\u0e2d\u0e08\u0e30\u0e40\u0e23\u0e35\u0e22\u0e01\u0e2d\u0e35\u0e01\u0e0a\u0e37\u0e48\u0e2d\u0e27\u0e48\u0e32 Server Blocks \u0e01\u0e47\u0e44\u0e14\u0e49\u0e19\u0e30) \u0e02\u0e36\u0e49\u0e19\u0e21\u0e32\u0e04\u0e23\u0e31\u0e1a \u0e41\u0e15\u0e48\u0e42\u0e14\u0e22\u0e1b\u0e01\u0e15\u0e34\u0e41\u0e25\u0e49\u0e27 Nginx \u0e2b\u0e25\u0e31\u0e07\u0e15\u0e34\u0e14\u0e15\u0e31\u0e49\u0e07 \u0e08\u0e30\u0e43\u0e2b\u0e49\u0e44\u0e1f\u0e25\u0e4c Configuration \u0e17\u0e35\u0e48\u0e40\u0e1b\u0e47\u0e19 Virtual Host \u0e21\u0e32\u0e44\u0e1f\u0e25\u0e4c\u0e40\u0e14\u0e35\u0e22\u0e27 \u0e04\u0e37\u0e2d\u0e44\u0e1f\u0e25\u0e4c <strong>&#8220;default&#8221;<\/strong> \u0e40\u0e23\u0e32\u0e2a\u0e32\u0e21\u0e32\u0e23\u0e16\u0e04\u0e31\u0e14\u0e25\u0e2d\u0e01\u0e44\u0e1f\u0e25\u0e4c\u0e19\u0e35\u0e49 \u0e41\u0e25\u0e49\u0e27\u0e2a\u0e23\u0e49\u0e32\u0e07\u0e40\u0e1b\u0e47\u0e19\u0e44\u0e1f\u0e25\u0e4c\u0e43\u0e2b\u0e21\u0e48\u0e02\u0e36\u0e49\u0e19\u0e21\u0e32\u0e44\u0e14\u0e49 \u0e40\u0e1e\u0e37\u0e48\u0e2d\u0e40\u0e1e\u0e34\u0e48\u0e21 Virtual Host \u0e02\u0e36\u0e49\u0e19\u0e21\u0e32 (Virtual Host \u0e21\u0e35\u0e1b\u0e23\u0e30\u0e42\u0e22\u0e0a\u0e19\u0e4c\u0e04\u0e37\u0e2d \u0e17\u0e33\u0e43\u0e2b\u0e49\u0e40\u0e04\u0e23\u0e37\u0e48\u0e2d\u0e07 Server \u0e02\u0e2d\u0e07\u0e40\u0e23\u0e32\u0e40\u0e04\u0e23\u0e37\u0e48\u0e2d\u0e07\u0e40\u0e14\u0e35\u0e22\u0e27 \u0e2a\u0e32\u0e21\u0e32\u0e23\u0e16\u0e21\u0e35\u0e40\u0e27\u0e47\u0e1a\u0e44\u0e0b\u0e15\u0e4c\u0e17\u0e35\u0e48\u0e08\u0e14\u0e17\u0e30\u0e40\u0e1a\u0e35\u0e22\u0e19 Domain \u0e15\u0e48\u0e32\u0e07\u0e01\u0e31\u0e19\u0e17\u0e33\u0e07\u0e32\u0e19\u0e43\u0e19 Server \u0e02\u0e2d\u0e07\u0e40\u0e23\u0e32\u0e2b\u0e25\u0e32\u0e22 Domain \u0e44\u0e14\u0e49 \u0e1e\u0e39\u0e14\u0e07\u0e48\u0e32\u0e22\u0e46\u0e40\u0e1b\u0e47\u0e19\u0e20\u0e32\u0e29\u0e32\u0e1a\u0e49\u0e32\u0e19\u0e46 \u0e44\u0e21\u0e48\u0e0b\u0e31\u0e1a\u0e0b\u0e49\u0e2d\u0e19 \u0e01\u0e47\u0e04\u0e37\u0e2d \u0e2a\u0e32\u0e21\u0e32\u0e23\u0e16\u0e43\u0e2b\u0e49\u0e1a\u0e23\u0e34\u0e01\u0e32\u0e23\u0e40\u0e27\u0e47\u0e1a\u0e44\u0e0b\u0e15\u0e4c\u0e2b\u0e25\u0e32\u0e22\u0e46\u0e40\u0e27\u0e47\u0e1a\u0e44\u0e14\u0e49\u0e43\u0e19 Server \u0e40\u0e04\u0e23\u0e37\u0e48\u0e2d\u0e07\u0e40\u0e14\u0e35\u0e22\u0e27) \u0e42\u0e14\u0e22\u0e1b\u0e01\u0e15\u0e34\u0e41\u0e25\u0e49\u0e27 \u0e44\u0e1f\u0e25\u0e4c Virtual Host \u0e08\u0e30\u0e16\u0e39\u0e01\u0e40\u0e01\u0e47\u0e1a\u0e44\u0e27\u0e49\u0e43\u0e19 Path<\/p>\n<pre>\/etc\/nginx\/sites-enabled\/<\/pre>\n<p>\u0e43\u0e19\u0e17\u0e35\u0e48\u0e19\u0e35\u0e49 \u0e08\u0e30\u0e22\u0e01\u0e15\u0e31\u0e27\u0e2d\u0e22\u0e48\u0e32\u0e07\u0e01\u0e32\u0e23\u0e41\u0e01\u0e49\u0e44\u0e02\u0e44\u0e1f\u0e25\u0e4c <strong>&#8220;default&#8221;<\/strong> \u0e43\u0e2b\u0e49\u0e14\u0e39\u0e01\u0e48\u0e2d\u0e19\u0e40\u0e1e\u0e37\u0e48\u0e2d\u0e40\u0e1b\u0e47\u0e19\u0e01\u0e32\u0e23\u0e22\u0e01\u0e15\u0e31\u0e27\u0e2d\u0e22\u0e48\u0e32\u0e07\u0e19\u0e30\u0e04\u0e23\u0e31\u0e1a \u0e42\u0e14\u0e22\u0e01\u0e32\u0e23\u0e41\u0e01\u0e49\u0e44\u0e02\u0e2a\u0e32\u0e21\u0e32\u0e23\u0e16\u0e43\u0e0a\u0e49\u0e04\u0e33\u0e2a\u0e31\u0e48\u0e07<\/p>\n<pre lang=\"bash\">nano \/etc\/nginx\/sites-enabled\/default<\/pre>\n<p>\u0e04\u0e38\u0e13\u0e08\u0e30\u0e44\u0e14\u0e49\u0e44\u0e1f\u0e25\u0e4c\u0e04\u0e23\u0e48\u0e32\u0e27\u0e46 \u0e2b\u0e19\u0e49\u0e32\u0e15\u0e32\u0e1b\u0e23\u0e30\u0e21\u0e32\u0e13\u0e19\u0e35\u0e49\u0e04\u0e23\u0e31\u0e1a<\/p>\n<pre>server {\r\n     \r\n            #replace  with your ip address.\r\n            #Otherwise, to listen on all interfaces on port 80 with IPv4,\r\n            #remove ':'\r\n            listen   80; ## listen for ipv4; this line is default and implied\r\n            #listen   [::]:80 default ipv6only=on; ## listen for ipv6.\r\n     \r\n            #location of your files, replace \/srv with the location of the files that you want to serve\r\n            root \/usr\/share\/nginx\/html;\r\n            #The index files. If you want, you can add others such as index.php, index.cgi, .etc .etc\r\n            index index.html index.htm;\r\n     \r\n            # The name of your domain (virtual hosts). Change 'localhost' to the domain that you are hosting\r\n            server_name localhost;\r\n     \r\n            location \/ {\r\n                    # First attempt to serve request as file, then\r\n                    # as directory, then fall back to a 404 error\r\n                    try_files $uri $uri\/ =404;\r\n                    # uncomment the line below to enable directory indexes\r\n                    # NOT recommended unless you know what you're doing.\r\n                    #autoindex on;\r\n            }\r\n     \r\n            #error_page 404 \/404.html;\r\n     \r\n            # redirect server error pages to the static page \/50x.html\r\n            #\r\n            #error_page 500 502 503 504 \/50x.html;\r\n            #location = \/50x.html {\r\n            #       root \/usr\/share\/nginx\/www;\r\n            #}\r\n     \r\n            # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000\r\n            #\r\n            #location ~ \\.php$ {\r\n            #       fastcgi_split_path_info ^(.+\\.php)(\/.+)$;\r\n            #        # NOTE: You should have \"cgi.fix_pathinfo = 0;\" in php.ini\r\n            #\r\n            #        # With php5-cgi alone:\r\n            #       fastcgi_pass 127.0.0.1:9000;\r\n                    # With php5-fpm:\r\n            #       fastcgi_pass unix:\/var\/run\/php5-fpm.sock;\r\n            #       fastcgi_index index.php;\r\n            #        include fastcgi_params;\r\n            #}\r\n     \r\n            # deny access to .htaccess files, if Apache's document root\r\n            # concurs with nginx's one\r\n            #\r\n            location ~ \/\\.ht {\r\n                    deny all;\r\n            }\r\n    }\r\n<\/pre>\n<p>\u0e43\u0e2b\u0e49\u0e43\u0e2a\u0e48\u0e02\u0e49\u0e2d\u0e04\u0e27\u0e32\u0e21\u0e15\u0e32\u0e21\u0e15\u0e31\u0e27\u0e2d\u0e31\u0e01\u0e29\u0e23\u0e2a\u0e35\u0e41\u0e14\u0e07\u0e40\u0e1e\u0e34\u0e48\u0e21\u0e25\u0e07\u0e44\u0e1b \u0e40\u0e1e\u0e37\u0e48\u0e2d\u0e43\u0e0a\u0e49\u0e43\u0e19\u0e01\u0e32\u0e23\u0e15\u0e23\u0e27\u0e08\u0e2a\u0e2d\u0e1a Domain \u0e02\u0e2d\u0e07\u0e17\u0e32\u0e07 Let&#8217;s Encrypt \u0e04\u0e23\u0e31\u0e1a<\/p>\n<pre>server {\r\n     \r\n            #replace  with your ip address.\r\n            #Otherwise, to listen on all interfaces on port 80 with IPv4,\r\n            #remove ':'\r\n            listen   80; ## listen for ipv4; this line is default and implied\r\n            #listen   [::]:80 default ipv6only=on; ## listen for ipv6.\r\n     \r\n            #location of your files, replace \/srv with the location of the files that you want to serve\r\n            root \/usr\/share\/nginx\/html;\r\n            #The index files. If you want, you can add others such as index.php, index.cgi, .etc .etc\r\n            index index.html index.htm;\r\n     \r\n            # The name of your domain (virtual hosts). Change 'localhost' to the domain that you are hosting\r\n            server_name localhost;\r\n     \r\n            location \/ {\r\n                    # First attempt to serve request as file, then\r\n                    # as directory, then fall back to a 404 error\r\n                    try_files $uri $uri\/ =404;\r\n                    # uncomment the line below to enable directory indexes\r\n                    # NOT recommended unless you know what you're doing.\r\n                    #autoindex on;\r\n            }\r\n            <span style=\"color: red;\">\r\n            location ~ \/.well-known {\r\n                allow all;\r\n            }\r\n           <\/span>\r\n            #error_page 404 \/404.html;\r\n     \r\n            # redirect server error pages to the static page \/50x.html\r\n            #\r\n            #error_page 500 502 503 504 \/50x.html;\r\n            #location = \/50x.html {\r\n            #       root \/usr\/share\/nginx\/www;\r\n            #}\r\n     \r\n            # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000\r\n            #\r\n            #location ~ \\.php$ {\r\n            #       fastcgi_split_path_info ^(.+\\.php)(\/.+)$;\r\n            #        # NOTE: You should have \"cgi.fix_pathinfo = 0;\" in php.ini\r\n            #\r\n            #        # With php5-cgi alone:\r\n            #       fastcgi_pass 127.0.0.1:9000;\r\n                    # With php5-fpm:\r\n            #       fastcgi_pass unix:\/var\/run\/php5-fpm.sock;\r\n            #       fastcgi_index index.php;\r\n            #        include fastcgi_params;\r\n            #}\r\n\r\n     \r\n            # deny access to .htaccess files, if Apache's document root\r\n            # concurs with nginx's one\r\n            #\r\n            location ~ \/\\.ht {\r\n                    deny all;\r\n            }\r\n    }\r\n<\/pre>\n<p>\u0e2b\u0e25\u0e31\u0e07\u0e08\u0e32\u0e01\u0e19\u0e31\u0e49\u0e19 \u0e43\u0e2b\u0e49\u0e17\u0e33\u0e01\u0e32\u0e23 reload service \u0e02\u0e2d\u0e07 Nginx \u0e2b\u0e25\u0e31\u0e07\u0e08\u0e32\u0e01\u0e41\u0e01\u0e49\u0e40\u0e23\u0e37\u0e48\u0e2d\u0e07 Configuration \u0e40\u0e2a\u0e23\u0e47\u0e08\u0e41\u0e25\u0e49\u0e27 \u0e14\u0e49\u0e27\u0e22\u0e04\u0e33\u0e2a\u0e31\u0e48\u0e07<\/p>\n<pre lang=\"bash\">service nginx reload<\/pre>\n<h2>\u0e40\u0e23\u0e34\u0e48\u0e21\u0e43\u0e2b\u0e49 Let&#8217;s Encrypt \u0e2a\u0e23\u0e49\u0e32\u0e07\u0e43\u0e1a\u0e23\u0e31\u0e1a\u0e23\u0e2d\u0e07<\/h2>\n<p>\u0e2b\u0e25\u0e31\u0e07\u0e08\u0e32\u0e01\u0e19\u0e31\u0e49\u0e19 \u0e40\u0e23\u0e32\u0e08\u0e30\u0e43\u0e0a\u0e49\u0e04\u0e33\u0e2a\u0e31\u0e48\u0e07 \u0e40\u0e1e\u0e37\u0e48\u0e2d\u0e40\u0e23\u0e34\u0e48\u0e21\u0e43\u0e2b\u0e49 Let&#8217;s Encrypt \u0e2a\u0e23\u0e49\u0e32\u0e07\u0e43\u0e1a\u0e23\u0e31\u0e1a\u0e23\u0e2d\u0e07\u0e43\u0e2b\u0e49\u0e01\u0e31\u0e1a Domain \u0e02\u0e2d\u0e07\u0e40\u0e23\u0e32\u0e17\u0e35\u0e48\u0e40\u0e23\u0e32\u0e15\u0e49\u0e2d\u0e07\u0e01\u0e32\u0e23 \u0e42\u0e14\u0e22\u0e43\u0e0a\u0e49\u0e04\u0e33\u0e2a\u0e31\u0e48\u0e07<\/p>\n<pre lang=\"bash\">cd \/opt\/letsencrypt\r\n.\/letsencrypt-auto certonly -a webroot --webroot-path=\/usr\/share\/nginx\/html -d example.com -d www.example.com\r\n<\/pre>\n<p>\u0e42\u0e14\u0e22\u0e40\u0e1b\u0e25\u0e35\u0e48\u0e22\u0e19\u0e08\u0e32\u0e01 example.com \u0e40\u0e1b\u0e47\u0e19 Domain \u0e02\u0e2d\u0e07\u0e04\u0e38\u0e13\u0e44\u0e14\u0e49\u0e40\u0e25\u0e22\u0e04\u0e23\u0e31\u0e1a<\/p>\n<p>\u0e2b\u0e25\u0e31\u0e07\u0e08\u0e32\u0e01\u0e19\u0e31\u0e49\u0e19\u0e41\u0e25\u0e49\u0e27 \u0e04\u0e38\u0e13\u0e08\u0e30\u0e40\u0e2b\u0e47\u0e19\u0e2b\u0e19\u0e49\u0e32\u0e15\u0e48\u0e32\u0e07\u0e2a\u0e33\u0e2b\u0e23\u0e31\u0e1a\u0e43\u0e2a\u0e48 Email Address \u0e02\u0e2d\u0e07\u0e04\u0e38\u0e13\u0e25\u0e07\u0e44\u0e1b<\/p>\n<p><img decoding=\"async\" class=\"aligncenter\" src=\"https:\/\/assets.digitalocean.com\/articles\/letsencrypt\/le-email.png\" alt=\"Email prompt\" \/><\/p>\n<p style=\"text-align: center;\"><span style=\"color: #ff0000;\"><em>https:\/\/assets.digitalocean.com\/articles\/letsencrypt\/le-email.png<\/em><\/span><\/p>\n<p style=\"text-align: left;\">\u0e2b\u0e25\u0e31\u0e07\u0e08\u0e32\u0e01\u0e19\u0e31\u0e49\u0e19 \u0e04\u0e38\u0e13\u0e08\u0e30\u0e15\u0e49\u0e2d\u0e07\u0e22\u0e2d\u0e21\u0e23\u0e31\u0e1a Let&#8217;s Encrypt Subscribe Agreement \u0e42\u0e14\u0e22\u0e01\u0e32\u0e23\u0e40\u0e25\u0e37\u0e2d\u0e01 Agree<\/p>\n<p style=\"text-align: left;\"><img decoding=\"async\" class=\"aligncenter\" src=\"https:\/\/assets.digitalocean.com\/articles\/letsencrypt\/le-agreement.png\" alt=\"Let's Encrypt Subscriber's Agreement\" \/><\/p>\n<p style=\"text-align: center;\"><em><span style=\"color: #ff0000;\">https:\/\/assets.digitalocean.com\/articles\/letsencrypt\/le-agreement.png<\/span><\/em><\/p>\n<blockquote>\n<p style=\"text-align: left;\">\u0e2b\u0e32\u0e01\u0e04\u0e38\u0e13\u0e17\u0e33\u0e07\u0e32\u0e19\u0e1a\u0e19 Docker Container Apache \u0e17\u0e35\u0e48\u0e21\u0e32\u0e08\u0e32\u0e01 Official Hub \u0e2b\u0e32\u0e01\u0e15\u0e2d\u0e19 Run \u0e15\u0e31\u0e27 letsencrypt-auto \u0e41\u0e25\u0e49\u0e27\u0e40\u0e01\u0e34\u0e14 Error PythonDialogBug \u0e43\u0e2b\u0e49\u0e17\u0e33\u0e01\u0e32\u0e23 set environment \u0e02\u0e2d\u0e07\u0e15\u0e31\u0e27 term \u0e01\u0e48\u0e2d\u0e19 \u0e42\u0e14\u0e22\u0e43\u0e0a\u0e49\u0e04\u0e33\u0e2a\u0e31\u0e48\u0e07 export term=xterm \u0e41\u0e25\u0e49\u0e27\u0e08\u0e36\u0e07 Run \u0e15\u0e31\u0e27 letsencrypt-auto \u0e2d\u0e35\u0e01\u0e04\u0e23\u0e31\u0e49\u0e07<\/p>\n<\/blockquote>\n<p>\u0e2b\u0e25\u0e31\u0e07\u0e08\u0e32\u0e01 Run \u0e15\u0e31\u0e27 letsencrypt-auto \u0e41\u0e25\u0e49\u0e27\u0e44\u0e21\u0e48\u0e21\u0e35\u0e2d\u0e30\u0e44\u0e23\u0e1c\u0e34\u0e14\u0e1e\u0e25\u0e32\u0e14 \u0e08\u0e30\u0e44\u0e14\u0e49\u0e02\u0e49\u0e2d\u0e04\u0e27\u0e32\u0e21\u0e1b\u0e23\u0e30\u0e21\u0e32\u0e13\u0e19\u0e35\u0e49\u0e04\u0e23\u0e31\u0e1a<\/p>\n<pre>IMPORTANT NOTES:\r\n - If you lose your account credentials, you can recover through\r\n   e-mails sent to kusumoto.com@gmail.com\r\n - Congratulations! Your certificate and chain have been saved at\r\n   <span style=\"color: red;\">\/etc\/letsencrypt\/live\/example.com\/fullchain.pem<\/span>. Your\r\n   cert will <span style=\"color: red;\">expire on 2016-03-15.<\/span> To obtain a new version of the\r\n   certificate in the future, simply run Let's Encrypt again.\r\n - Your account credentials have been saved in your Let's Encrypt\r\n   configuration directory at \/etc\/letsencrypt. You should make a\r\n   secure backup of this folder now. This configuration directory will\r\n   also contain certificates and private keys obtained by Let's\r\n   Encrypt so making regular backups of this folder is ideal.\r\n - If like Let's Encrypt, please consider supporting our work by:\r\n\r\n   Donating to ISRG \/ Let's Encrypt:   https:\/\/letsencrypt.org\/donate\r\n   Donating to EFF:                    https:\/\/eff.org\/donate-le\r\n<\/pre>\n<p>\u0e04\u0e38\u0e13\u0e08\u0e30\u0e44\u0e14\u0e49 Path \u0e02\u0e2d\u0e07\u0e43\u0e1a\u0e23\u0e31\u0e1a\u0e23\u0e2d\u0e07\u0e17\u0e35\u0e48 Generate \u0e21\u0e32 \u0e41\u0e25\u0e30\u0e27\u0e31\u0e19\u0e2b\u0e21\u0e14\u0e2d\u0e32\u0e22\u0e38\u0e02\u0e2d\u0e07\u0e43\u0e1a\u0e23\u0e31\u0e1a\u0e23\u0e2d\u0e07\u0e19\u0e31\u0e49\u0e19 \u0e42\u0e14\u0e22\u0e2d\u0e32\u0e22\u0e38\u0e08\u0e30\u0e2d\u0e22\u0e38\u0e48\u0e17\u0e35\u0e48 3 \u0e40\u0e14\u0e37\u0e2d\u0e19 \u0e2a\u0e32\u0e21\u0e32\u0e23\u0e16\u0e15\u0e48\u0e2d\u0e44\u0e14\u0e49\u0e44\u0e21\u0e48\u0e08\u0e33\u0e01\u0e31\u0e14\u0e04\u0e23\u0e31\u0e49\u0e07\u0e04\u0e23\u0e31\u0e1a \u0e2b\u0e25\u0e31\u0e07\u0e08\u0e32\u0e01\u0e19\u0e31\u0e49\u0e19 \u0e40\u0e23\u0e32\u0e08\u0e30\u0e40\u0e2d\u0e32 Certificate \u0e44\u0e1b\u0e43\u0e2a\u0e48\u0e43\u0e2b\u0e49\u0e01\u0e31\u0e1a Nginx \u0e01\u0e31\u0e19\u0e04\u0e23\u0e31\u0e1a<\/p>\n<h2>\u0e43\u0e2a\u0e48\u0e43\u0e1a\u0e23\u0e31\u0e1a\u0e23\u0e2d\u0e07\u0e43\u0e2b\u0e49\u0e01\u0e31\u0e1a Nginx<\/h2>\n<p>\u0e43\u0e2b\u0e49\u0e04\u0e38\u0e13\u0e43\u0e2a\u0e48\u0e43\u0e1a\u0e23\u0e31\u0e1a\u0e23\u0e2d\u0e07\u0e1e\u0e23\u0e49\u0e2d\u0e21\u0e40\u0e1b\u0e34\u0e14\u0e43\u0e0a\u0e49\u0e07\u0e32\u0e19 HTTPS \u0e43\u0e2b\u0e49\u0e01\u0e31\u0e1a Nginx \u0e04\u0e23\u0e31\u0e1a \u0e42\u0e14\u0e22\u0e40\u0e23\u0e32\u0e08\u0e30\u0e40\u0e02\u0e49\u0e32\u0e44\u0e1b\u0e41\u0e01\u0e49\u0e44\u0e02\u0e44\u0e1f\u0e25\u0e4c Configuration \u0e02\u0e2d\u0e07 Virtual Host \u0e43\u0e19\u0e17\u0e35\u0e48\u0e19\u0e35\u0e48\u0e40\u0e23\u0e32\u0e43\u0e0a\u0e49 <strong>&#8220;default&#8221;<\/strong><\/p>\n<pre lang=\"bash\">nano \/etc\/nginx\/sites-available\/default<\/pre>\n<pre>server {\r\n     \r\n            #replace  with your ip address.\r\n            #Otherwise, to listen on all interfaces on port 80 with IPv4,\r\n            #remove ':'\r\n            <span style=\"color: red;\">#listen   80; ## listen for ipv4; this line is default and implied<\/span>\r\n            #listen   [::]:80 default ipv6only=on; ## listen for ipv6.\r\n            <span style=\"color: red;\">listen 443 ssl;<\/span>\r\n     \r\n            #location of your files, replace \/srv with the location of the files that you want to serve\r\n            root \/usr\/share\/nginx\/html;\r\n            #The index files. If you want, you can add others such as index.php, index.cgi, .etc .etc\r\n            index index.html index.htm;\r\n     \r\n            # The name of your domain (virtual hosts). Change 'localhost' to the domain that you are hosting\r\n            <span style=\"color: red;\">server_name example.com www.example.com;<\/span>\r\n     \r\n            location \/ {\r\n                    # First attempt to serve request as file, then\r\n                    # as directory, then fall back to a 404 error\r\n                    try_files $uri $uri\/ =404;\r\n                    # uncomment the line below to enable directory indexes\r\n                    # NOT recommended unless you know what you're doing.\r\n                    #autoindex on;\r\n            }\r\n        \r\n            location ~ \/.well-known {\r\n                allow all;\r\n            }\r\n          \r\n            #error_page 404 \/404.html;\r\n     \r\n            # redirect server error pages to the static page \/50x.html\r\n            #\r\n            #error_page 500 502 503 504 \/50x.html;\r\n            #location = \/50x.html {\r\n            #       root \/usr\/share\/nginx\/www;\r\n            #}\r\n     \r\n            # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000\r\n            #\r\n            #location ~ \\.php$ {\r\n            #       fastcgi_split_path_info ^(.+\\.php)(\/.+)$;\r\n            #        # NOTE: You should have \"cgi.fix_pathinfo = 0;\" in php.ini\r\n            #\r\n            #        # With php5-cgi alone:\r\n            #       fastcgi_pass 127.0.0.1:9000;\r\n                    # With php5-fpm:\r\n            #       fastcgi_pass unix:\/var\/run\/php5-fpm.sock;\r\n            #       fastcgi_index index.php;\r\n            #        include fastcgi_params;\r\n            #}\r\n\r\n     \r\n            # deny access to .htaccess files, if Apache's document root\r\n            # concurs with nginx's one\r\n            #\r\n            location ~ \/\\.ht {\r\n                    deny all;\r\n            }\r\n            <span style=\"color: red;\">\r\n            ssl_certificate \/etc\/letsencrypt\/live\/example.com\/fullchain.pem;\r\n            ssl_certificate_key \/etc\/letsencrypt\/live\/example.com\/privkey.pem;\r\n            ssl_protocols TLSv1 TLSv1.1 TLSv1.2;\r\n            ssl_prefer_server_ciphers on;\r\n            ssl_ciphers 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA';\r\n           ssl_session_timeout 1d;\r\n           ssl_session_cache shared:SSL:50m;\r\n           ssl_stapling on;\r\n           ssl_stapling_verify on;\r\n           add_header Strict-Transport-Security max-age=15768000;\r\n          <\/span>\r\n    }\r\n\r\n<span style=\"color: red;\">server {\r\n    listen 80;\r\n    server_name example.com www.example.com;\r\n    return 301 https:\/\/$host$request_uri;\r\n}<\/span>\r\n<\/pre>\n<p>\u0e2d\u0e22\u0e48\u0e32\u0e25\u0e37\u0e21\u0e41\u0e01\u0e49\u0e15\u0e31\u0e27 example.com \u0e40\u0e1b\u0e47\u0e19 Domain \u0e02\u0e2d\u0e07\u0e04\u0e38\u0e13\u0e19\u0e30\u0e04\u0e23\u0e31\u0e1a \u0e2b\u0e25\u0e31\u0e07\u0e08\u0e32\u0e01\u0e40\u0e1b\u0e25\u0e35\u0e48\u0e22\u0e19\u0e40\u0e23\u0e35\u0e22\u0e1a\u0e23\u0e49\u0e2d\u0e22\u0e41\u0e25\u0e49\u0e27 \u0e2d\u0e22\u0e48\u0e32\u0e25\u0e37\u0e21 Save \u0e41\u0e25\u0e30 Reload service nginx \u0e43\u0e2b\u0e21\u0e48\u0e19\u0e30\u0e04\u0e23\u0e31\u0e1a \u0e42\u0e14\u0e22\u0e04\u0e33\u0e2a\u0e31\u0e48\u0e07<\/p>\n<pre lang=\"bash\">service nginx reload<\/pre>\n<h2>\u0e21\u0e32\u0e15\u0e31\u0e49\u0e07\u0e04\u0e48\u0e32 Reverse Proxy \u0e43\u0e2b\u0e49 Nginx \u0e01\u0e31\u0e19<\/h2>\n<p>\u0e04\u0e23\u0e32\u0e27\u0e19\u0e35\u0e49\u0e08\u0e30\u0e40\u0e1b\u0e47\u0e19\u0e01\u0e32\u0e23\u0e15\u0e31\u0e49\u0e07\u0e04\u0e48\u0e32 Reverse Proxy \u0e43\u0e2b\u0e49\u0e01\u0e31\u0e1a Nginx \u0e01\u0e31\u0e19\u0e04\u0e23\u0e31\u0e1a \u0e42\u0e14\u0e22\u0e17\u0e33\u0e01\u0e32\u0e23\u0e41\u0e01\u0e49\u0e44\u0e02\u0e44\u0e1f\u0e25\u0e4c Configuration \u0e02\u0e2d\u0e07 Virtual Host \u0e43\u0e19\u0e17\u0e35\u0e48\u0e19\u0e35\u0e48\u0e40\u0e23\u0e32\u0e43\u0e0a\u0e49 <strong>&#8220;default&#8221;<\/strong> \u0e42\u0e14\u0e22\u0e43\u0e0a\u0e49\u0e04\u0e33\u0e2a\u0e31\u0e48\u0e07<\/p>\n<pre lang=\"bash\">nano \/etc\/nginx\/sites-available\/default<\/pre>\n<p>\u0e2b\u0e25\u0e31\u0e07\u0e08\u0e32\u0e01\u0e19\u0e31\u0e49\u0e19 \u0e43\u0e2b\u0e49\u0e17\u0e33\u0e01\u0e32\u0e23\u0e40\u0e1e\u0e34\u0e48\u0e21\u0e02\u0e49\u0e2d\u0e04\u0e27\u0e32\u0e21\u0e17\u0e35\u0e48\u0e43\u0e0a\u0e49\u0e17\u0e33 Reverse Proxy \u0e04\u0e23\u0e31\u0e1a<\/p>\n<pre>server {\r\n     \r\n            #replace  with your ip address.\r\n            #Otherwise, to listen on all interfaces on port 80 with IPv4,\r\n            #remove ':'\r\n            <span style=\"color: red;\">#listen   80; ## listen for ipv4; this line is default and implied<\/span>\r\n            #listen   [::]:80 default ipv6only=on; ## listen for ipv6.\r\n            listen 443 ssl;\r\n     \r\n            #location of your files, replace \/srv with the location of the files that you want to serve\r\n            root \/usr\/share\/nginx\/html;\r\n            #The index files. If you want, you can add others such as index.php, index.cgi, .etc .etc\r\n            index index.html index.htm;\r\n     \r\n            # The name of your domain (virtual hosts). Change 'localhost' to the domain that you are hosting\r\n            server_name example.com www.example.com;\r\n     \r\n            location \/ {\r\n                    # First attempt to serve request as file, then\r\n                    # as directory, then fall back to a 404 error\r\n                    try_files $uri $uri\/ =404;\r\n                    # uncomment the line below to enable directory indexes\r\n                    # NOT recommended unless you know what you're doing.\r\n                    #autoindex on;\r\n            }\r\n        \r\n            location ~ \/.well-known {\r\n                allow all;\r\n            }\r\n            <span style=\"color: red;\">\r\n            location \/ {\r\n                proxy_set_header X-Real-IP  $remote_addr;\r\n                proxy_set_header X-Forwarded-For $remote_addr;\r\n                proxy_set_header Host $host;\r\n                proxy_pass &lt;&lt; \u0e40\u0e04\u0e23\u0e37\u0e48\u0e2d\u0e07\u0e20\u0e32\u0e22\u0e43\u0e19\u0e17\u0e35\u0e48 Web Application \u0e17\u0e33\u0e07\u0e32\u0e19\u0e2d\u0e22\u0e39\u0e48 &gt;&gt;;\r\n            }\r\n           <\/span>\r\n            #error_page 404 \/404.html;\r\n     \r\n            # redirect server error pages to the static page \/50x.html\r\n            #\r\n            #error_page 500 502 503 504 \/50x.html;\r\n            #location = \/50x.html {\r\n            #       root \/usr\/share\/nginx\/www;\r\n            #}\r\n     \r\n            # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000\r\n            #\r\n            #location ~ \\.php$ {\r\n            #       fastcgi_split_path_info ^(.+\\.php)(\/.+)$;\r\n            #        # NOTE: You should have \"cgi.fix_pathinfo = 0;\" in php.ini\r\n            #\r\n            #        # With php5-cgi alone:\r\n            #       fastcgi_pass 127.0.0.1:9000;\r\n                    # With php5-fpm:\r\n            #       fastcgi_pass unix:\/var\/run\/php5-fpm.sock;\r\n            #       fastcgi_index index.php;\r\n            #        include fastcgi_params;\r\n            #}\r\n\r\n     \r\n            # deny access to .htaccess files, if Apache's document root\r\n            # concurs with nginx's one\r\n            #\r\n            location ~ \/\\.ht {\r\n                    deny all;\r\n            }\r\n           \r\n            ssl_certificate \/etc\/letsencrypt\/live\/example.com\/fullchain.pem;\r\n            ssl_certificate_key \/etc\/letsencrypt\/live\/example.com\/privkey.pem;\r\n            ssl_protocols TLSv1 TLSv1.1 TLSv1.2;\r\n            ssl_prefer_server_ciphers on;\r\n            ssl_ciphers 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA';\r\n           ssl_session_timeout 1d;\r\n           ssl_session_cache shared:SSL:50m;\r\n           ssl_stapling on;\r\n           ssl_stapling_verify on;\r\n           add_header Strict-Transport-Security max-age=15768000;\r\n          \r\n    }\r\n\r\nserver {\r\n    listen 80;\r\n    server_name example.com www.example.com;\r\n    return 301 https:\/\/$host$request_uri;\r\n}\r\n<\/pre>\n<p>\u0e2b\u0e25\u0e31\u0e07\u0e08\u0e32\u0e01\u0e40\u0e1b\u0e25\u0e35\u0e48\u0e22\u0e19\u0e40\u0e23\u0e35\u0e22\u0e1a\u0e23\u0e49\u0e2d\u0e22\u0e41\u0e25\u0e49\u0e27 \u0e2d\u0e22\u0e48\u0e32\u0e25\u0e37\u0e21 Save \u0e41\u0e25\u0e30 Reload service nginx \u0e43\u0e2b\u0e21\u0e48\u0e19\u0e30\u0e04\u0e23\u0e31\u0e1a \u0e42\u0e14\u0e22\u0e04\u0e33\u0e2a\u0e31\u0e48\u0e07<\/p>\n<pre lang=\"bash\">service nginx reload<\/pre>\n<p>\u0e41\u0e04\u0e48\u0e19\u0e35\u0e49 \u0e40\u0e23\u0e32\u0e01\u0e47\u0e08\u0e30\u0e2a\u0e32\u0e21\u0e32\u0e23\u0e16\u0e17\u0e33 nginx https Reverse Proxy \u0e1e\u0e23\u0e49\u0e2d\u0e21\u0e15\u0e34\u0e14\u0e15\u0e31\u0e49\u0e07 SSL Certificate \u0e08\u0e32\u0e01 Let&#8217;s Encrypt \u0e40\u0e23\u0e35\u0e22\u0e1a\u0e23\u0e49\u0e2d\u0e22\u0e41\u0e25\u0e49\u0e27\u0e04\u0e23\u0e31\u0e1a<\/p>\n<p>Ref :<a href=\"https:\/\/www.digitalocean.com\/community\/tutorials\/how-to-secure-nginx-with-let-s-encrypt-on-ubuntu-14-04\" target=\"_blank\"> https:\/\/www.digitalocean.com\/community\/tutorials\/how-to-secure-nginx-with-let-s-encrypt-on-ubuntu-14-04<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u0e17\u0e35\u0e48\u0e08\u0e23\u0e34\u0e07\u0e2d\u0e22\u0e32\u0e01\u0e08\u0e30\u0e40\u0e02\u0e35\u0e22\u0e19\u0e40\u0e23\u0e37\u0e48\u0e2d\u0e07\u0e19\u0e35\u0e49\u0e40\u0e2d\u0e32\u0e44\u0e27\u0e49\u0e2a\u0e31\u0e01\u0e1e\u0e31\u0e01\u0e41\u0e2b\u0e25\u0e30 \u0e40\u0e1e\u0e23\u0e32\u0e30\u0e15\u0e34\u0e14\u0e1b\u0e31\u0e0d\u0e2b\u0e32\u0e19\u0e35\u0e49\u0e2d\u0e22\u0e39\u0e48\u0e1e\u0e2d\u0e14\u0e35\u0e23\u0e30\u0e2b\u0e27\u0e48\u0e32\u0e07\u0e01\u0e32\u0e23\u0e22\u0e49\u0e32\u0e22 Server \u0e44\u0e1b\u0e22\u0e31\u0e07\u0e1c\u0e39\u0e49\u0e43\u0e2b\u0e49\u0e1a\u0e23\u0e34\u0e01\u0e32\u0e23 Iass \u0e23\u0e32\u0e22\u0e43\u0e2b\u0e21\u0e48 \u0e40\u0e1b\u0e47\u0e19\u0e01\u0e32\u0e23\u0e2a\u0e23\u0e49\u0e32\u0e07 Instance \u0e40\u0e04\u0e23\u0e37\u0e48\u0e2d\u0e07\u0e40\u0e14\u0e35\u0e22\u0e27 \u0e43\u0e19\u0e40\u0e04\u0e23\u0e37\u0e48\u0e2d\u0e07\u0e19\u0e31\u0e49\u0e19\u0e1b\u0e23\u0e30\u0e01\u0e2d\u0e1a\u0e44\u0e1b\u0e14\u0e49\u0e27\u0e22 Docker Container \u0e15\u0e32\u0e21\u0e42\u0e1b\u0e23\u0e40\u0e08\u0e47\u0e04\u0e17\u0e35\u0e48\u0e17\u0e33\u0e07\u0e32\u0e19\u0e2d\u0e22\u0e39\u0e48 \u0e16\u0e37\u0e2d\u0e27\u0e48\u0e32\u0e43\u0e0a\u0e49\u0e07\u0e32\u0e19\u0e40\u0e21\u0e47\u0e14\u0e40\u0e07\u0e34\u0e19\u0e43\u0e2b\u0e49\u0e04\u0e38\u0e49\u0e21\u0e04\u0e48\u0e32\u0e41\u0e25\u0e49\u0e27\u0e01\u0e31\u0e19 \u0e17\u0e35\u0e19\u0e35\u0e49\u0e08\u0e33\u0e40\u0e1b\u0e47\u0e19\u0e15\u0e49\u0e2d\u0e07\u0e17\u0e33 Reverse Proxy \u0e40\u0e1e\u0e37\u0e48\u0e2d Forward \u0e15\u0e48\u0e2d\u0e40\u0e02\u0e49\u0e32\u0e44\u0e1b\u0e43\u0e19 Container \u0e17\u0e35\u0e48\u0e21\u0e35 Web Application \u0e2d\u0e22\u0e39\u0e48 + \u0e2d\u0e22\u0e32\u0e01\u0e44\u0e14\u0e49 SSL \u0e41\u0e1a\u0e1a\u0e40\u0e02\u0e35\u0e22\u0e27\u0e46 \u0e44\u0e21\u0e48\u0e41\u0e14\u0e07\u0e1e\u0e2d\u0e14\u0e35 \u0e40\u0e25\u0e22\u0e2b\u0e32\u0e27\u0e34\u0e18\u0e35\u0e17\u0e33\u0e41\u0e25\u0e30\u0e21\u0e32\u0e1a\u0e2d\u0e01\u0e01\u0e25\u0e48\u0e32\u0e27\u0e01\u0e31\u0e19\u0e04\u0e23\u0e31\u0e1a \u0e40\u0e2d\u0e32\u0e2b\u0e25\u0e48\u0e30 \u0e1c\u0e21\u0e08\u0e30\u0e40\u0e25\u0e48\u0e32\u0e43\u0e2b\u0e49\u0e1f\u0e31\u0e07\u0e40\u0e1b\u0e47\u0e19\u0e02\u0e31\u0e49\u0e19\u0e46\u0e44\u0e1b\u0e19\u0e30\u0e04\u0e23\u0e31\u0e1a \u0e15\u0e34\u0e14\u0e15\u0e31\u0e49\u0e07 Package \u0e17\u0e35\u0e48\u0e08\u0e33\u0e40\u0e1b\u0e47\u0e19\u0e01\u0e48\u0e2d\u0e19\u0e01\u0e32\u0e23\u0e15\u0e34\u0e14\u0e15\u0e31\u0e49\u0e07 \u0e40\u0e23\u0e32\u0e08\u0e30\u0e15\u0e49\u0e2d\u0e07\u0e15\u0e34\u0e14\u0e15\u0e31\u0e49\u0e07 Package \u0e17\u0e35\u0e48\u0e08\u0e30\u0e43\u0e0a\u0e49\u0e43\u0e19\u0e01\u0e32\u0e23\u0e15\u0e34\u0e14\u0e15\u0e31\u0e49\u0e07\u0e01\u0e48\u0e2d\u0e19 \u0e42\u0e14\u0e22 Package \u0e1e\u0e27\u0e01\u0e19\u0e35\u0e49\u0e08\u0e30\u0e43\u0e0a\u0e49\u0e43\u0e19\u0e01\u0e32\u0e23\u0e14\u0e36\u0e07\u0e15\u0e31\u0e27\u0e15\u0e34\u0e14\u0e15\u0e31\u0e49\u0e07\u00a0Let&#8217;s Encrypt \u0e21\u0e32\u0e08\u0e32\u0e01 Repository \u0e42\u0e14\u0e22\u0e43\u0e0a\u0e49\u0e04\u0e33\u0e2a\u0e31\u0e48\u0e07\u0e19\u0e35\u0e49 apt-get -y install git bc \u0e2b\u0e25\u0e31\u0e07\u0e08\u0e32\u0e01\u0e19\u0e31\u0e49\u0e19 \u0e43\u0e2b\u0e49\u0e17\u0e33\u0e01\u0e32\u0e23 Clone Project [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"footnotes":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false,"jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":[]},"categories":[48,65],"tags":[],"class_list":["post-1394","post","type-post","status-publish","format-standard","hentry","category-network","category-server"],"jetpack_publicize_connections":[],"aioseo_notices":[],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/p3OMEb-mu","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/oldblog.kusumotolab.com\/index.php?rest_route=\/wp\/v2\/posts\/1394","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oldblog.kusumotolab.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/oldblog.kusumotolab.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/oldblog.kusumotolab.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/oldblog.kusumotolab.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1394"}],"version-history":[{"count":22,"href":"https:\/\/oldblog.kusumotolab.com\/index.php?rest_route=\/wp\/v2\/posts\/1394\/revisions"}],"predecessor-version":[{"id":1417,"href":"https:\/\/oldblog.kusumotolab.com\/index.php?rest_route=\/wp\/v2\/posts\/1394\/revisions\/1417"}],"wp:attachment":[{"href":"https:\/\/oldblog.kusumotolab.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1394"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/oldblog.kusumotolab.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1394"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/oldblog.kusumotolab.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1394"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}