SSL Raspberrypi

Install package:

sudo sed -i "$ a\deb http://ftp.debian.org/debian jessie-backports main" /etc/apt/sources.list
sudo apt-get update
sudo apt-get install certbot -t jessie-backports -y --force-yes

Create SSL key:

sudo certbot certonly -a webroot --webroot-path=/var/www/html/getsimple -d portafreak.duckdns.org -d www.portafreak.duckdns.org

Renew certificate every month et 12:30 AM otherwise it will expire after 3 months (cronjob):

30 00 1 * * /usr/bin/certbot renew --noninteractive --renew-hook "/bin/systemctl reload nginx" >> /var/log/le-renew.log

Nginx config:

server {
    listen 80;
    server_name portafreak.duckdns.org;
	# enforce https
    return 301 https://$server_name$request_uri;

}

server {
	
	# SSL configuration
	#
	listen 443 ssl default_server;
	listen [::]:443 ssl default_server;
    server_name portafreak.duckdns.org;
    ssl_certificate /etc/letsencrypt/live/portafreak.duckdns.org/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/portafreak.duckdns.org/privkey.pem;
	root /var/www/html/getsimple;
}

Check Nginx config and restart if OK:

nginx -t
systemctl restart nginx.service