ssl

To configure nginx for HTTPS, this Skill obtains Let's Encrypt certificates via certbot, writes secure server blocks enforcing TLSv1.2 and TLSv1.3, and sets up automatic renewal so your website is secured without manual certificate management.

The best way to redirect HTTP to HTTPS on nginx is by updating server blocks. This Skill configures the redirect automatically while applying secure cipher suites and HSTS headers to force traffic over a secure TLS connection.

Yes, this Skill works for both single-server and reverse-proxy nginx deployments. It configures SSL/TLS termination, applies OCSP stapling and session caching, and validates the configuration to ensure HTTPS functions correctly behind the reverse proxy.

Yes, you can use self-signed certificates for development. This Skill generates self-signed certificates when Let's Encrypt is not applicable, applying the same secure TLS settings including session caching and correct certificate chain usage.

Certbot handles automatic renewal by integrating with nginx configuration files. This Skill sets up the renewal integration, backs up existing configs, and validates the updated server blocks so SSL certificates renew without downtime or manual intervention.

Nginx should enforce TLSv1.2 and TLSv1.3 with safe cipher suites for HTTPS. This Skill applies these secure TLS settings automatically, enabling OCSP stapling and verification alongside session caching to protect web traffic.