@@ -15,8 +15,9 @@ sudo apt-get install -y -q nginx
15
15
# for gzip support in uwsgi
16
16
sudo apt-get install --no-install-recommends -y -q libpcre3-dev libz-dev
17
17
18
- # Stop the hackers
19
- sudo apt install fail2ban -y
18
+ # Fail2ban no longer supported
19
+ # Skip this for now.
20
+ # sudo apt install fail2ban -y
20
21
21
22
ufw allow 22
22
23
ufw allow 80
@@ -78,9 +79,27 @@ update-rc.d nginx enable
78
79
service nginx restart
79
80
80
81
81
- # Optionally add SSL support via Let's Encrypt:
82
- # https://www.digitalocean.com/community/tutorials/how-to-secure-nginx-with-let-s-encrypt-on-ubuntu-18-04
82
+ # Optionally add SSL support via Let's Encrypt
83
+ # NOTE: These steps have changed since the recording.
83
84
84
- add-apt-repository ppa:certbot/certbot
85
- apt install python-certbot-nginx
85
+ # ###### NEW STEPS ###############################################
86
+ # See https://certbot.eff.org/instructions?ws=nginx&os=ubuntufocal&tab=standard
87
+
88
+ # Because always a good idea :)
89
+ apt update
90
+ apt upgrade
91
+
92
+ # Not need even though it's in the instructions, is installed on Ubuntu
93
+ # Skip -> install snapd https://snapcraft.io/docs/installing-snapd
94
+
95
+ snap install --classic certbot
96
+ ln -s /snap/bin/certbot /usr/bin/certbot
86
97
certbot --nginx -d guitary.talkpython.com
98
+
99
+ # ###### THESE ARE THE OLD STEPS #################################
100
+ #
101
+ # # https://www.digitalocean.com/community/tutorials/how-to-secure-nginx-with-let-s-encrypt-on-ubuntu-18-04
102
+ #
103
+ # add-apt-repository ppa:certbot/certbot
104
+ # apt install python-certbot-nginx
105
+ # certbot --nginx -d guitary.talkpython.com
0 commit comments