March 18, 2025

How to Enable Ssl/tls on Nginx in 2025?

Nginx SSL/TLS Setup

Enabling SSL/TLS on your Nginx server is crucial for securing data transmission and ensuring user trust. In this guide, we will walk you through the steps to enable SSL/TLS on Nginx in 2025, providing your website with the necessary protection and a boost in SEO rankings.

Why Use SSL/TLS with Nginx? #

Secure Sockets Layer (SSL) and Transport Layer Security (TLS) are protocols that encrypt data between a server and a client. Using SSL/TLS is essential for the following reasons:

Data Encryption: Keeps sensitive information safe from cyber threats.
SEO Benefits: Search engines prioritize websites with SSL certificates.
User Trust: Provides a secure browsing experience for users.

Prerequisites #

Before you start, ensure you have the following:

A registered domain name
An Nginx server instance running on your system
Root or sudo user access to your server
An SSL certificate (self-signed or from a certificate authority)

Step-by-Step Guide to Enable SSL/TLS #

Step 1: Install Nginx #

Ensure you have Nginx installed on your server. If not, you can install it using:

sudo apt update
sudo apt install nginx

Step 2: Obtain an SSL Certificate #

You can use a free certificate from Let’s Encrypt or purchase one from a trusted Certificate Authority (CA). For Let’s Encrypt, you can use the Certbot tool:

sudo apt install certbot python3-certbot-nginx

Step 3: Configure Nginx for SSL/TLS #

Create a Configuration File: Open your Nginx configuration file or create a new one for your domain.

   sudo nano /etc/nginx/sites-available/your_domain

Add SSL Settings: Modify the server block:

   server {
       listen 80;
       server_name your_domain.com www.your_domain.com;

       listen 443 ssl; 
       ssl_certificate /etc/letsencrypt/live/your_domain.com/fullchain.pem;
       ssl_certificate_key /etc/letsencrypt/live/your_domain.com/privkey.pem;

       ssl_protocols TLSv1.2 TLSv1.3;
       ssl_ciphers "TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256";

       location / {
           proxy_pass http://localhost:3000;
       }
   }

Step 4: Enable the Configuration and Restart Nginx #

Enable the Site:

   sudo ln -s /etc/nginx/sites-available/your_domain /etc/nginx/sites-enabled/

Test the Configuration:

   sudo nginx -t

Restart Nginx:

   sudo systemctl restart nginx

Further Optimization #

Consider serving images and assets from Nginx to improve speed. Learn more about Nginx image server.
Hide the Nginx server header for additional security. Follow this guide.
Deploy your Node.js application on Nginx using this tutorial.

Conclusion #

By following these steps, you can enable SSL/TLS on your Nginx server, ensuring secure and encrypted communication for your users. Keep your Nginx server updated and explore additional security measures for optimal performance. SSL/TLS not only secures your website but also enhances its visibility in search engine rankings in 2025 and beyond.

Kudos