Configuring SSL Certificates on EC2 with Nginx

Securing your web applications with SSL/TLS certificates is essential for protecting user data and ensuring a safe browsing experience. In this guide, we'll walk through the process of configuring SSL certificates on an EC2 instance hosting both frontend and backend applications using Nginx. We'll also cover how to renew these certificates to ensure ongoing security.

Prerequisites - An EC2 instance with both frontend and backend applications deployed. - Nginx installed on the EC2 instance. - Certbot installed on the EC2 instance for managing SSL certificates.

Step 1: Install Nginx

If you haven't already installed Nginx, use the following commands:

bash sudo apt update 
sudo apt install nginx

Step 2: Obtain SSL Certificates

Use Certbot to obtain SSL certificates for your domains. Replace your-domain.com with your actual domain.

sudo certbot --nginx

Follow the prompts to select the domains you want to secure and complete the setup. Certbot will automatically update your Nginx configuration.

Step 3: Update Nginx Configuration

Verify that your Nginx configuration file includes the SSL certificate paths. Open the Nginx configuration file:

sudo nano /etc/nginx/sites-available/default

Ensure that your server block includes the SSL settings:

server {
    listen 443 ssl;
    server_name your-domain.com www.your-domain.com;

    ssl_certificate /etc/letsencrypt/live/your-domain.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/your-domain.com/privkey.pem;

    # Other SSL configurations...

    location / {
        # Your app settings...
    }
}

Step 4: Restart Nginx

Restart Nginx to apply the changes:

sudo systemctl restart nginx

Step 5: Update React App

Ensure that your React app makes requests using https:// instead of http. Update any hardcoded API or resource URLs in your React app to use the secure protocol.

Step 6: Automate Certificate Renewal

Certbot sets up automatic renewal by default. Verify the renewal setup:

sudo certbot renew --dry-run

This command performs a dry run renewal to check if the renewal process is working.

Conclusion

Congratulations! You have successfully configured SSL certificates on your EC2 instance hosting a frontend and backend using Nginx. Regularly check for certificate renewals to prevent expiration issues and ensure ongoing security.

If you encounter any issues or have questions, feel free to consult the Certbot documentation or the Nginx documentation.

Happy coding and stay secure!