HTTPS encrypts communication between browsers and your server using SSL/TLS certificates. Let's Encrypt provides free 90-day certificates, and modern tools like Certbot automate the entire setup.
Certbot is the official Let's Encrypt client. Install it on your server: sudo apt install certbot python3-certbot-nginx # or for Apache: sudo apt install certbot python3-certbot-apache
Run Certbot to automatically obtain and install a certificate: sudo certbot --nginx -d example.com -d www.example.com Certbot automatically configures HTTPS and HTTP-to-HTTPS redirects.
Let's Encrypt certificates expire after 90 days. Certbot sets up automatic renewal via a systemd timer or cron job: sudo certbot renew --dry-run
Test your HTTPS configuration using online tools like SSL Labs SSL Server Test. Check for A+ rating.