certbot

apt -y install certbot

sudo cerbot certonly

SSL

/etc/apache2/sites-available/default-ssl.conf

  • FDQN
  • SSLCertificateFile      /etc/letsencrypt/live/lapidem.pw/cert.pem
  • SSLCertificateKeyFile   /etc/letsencrypt/live/lapidem.pw/privkey.pem
  • SSLCertificateChainFile /etc/letsencrypt/live/lapidem.pw/chain.pem
  • <FileMatch ¥.php>
    • setHandler “proxy:unix:/var/run/php/php8.2-fpm.sock|fcgi://localhost/”
  • </FileMatch>

sudo a2ensite default-ssl

sudo a2enmod ssl

systemctl restart apache2