teejay4u / project-10

LOAD BALANCER SOLUTION WITH NGINX AND SSL/TLS

Project-10

LOAD BALANCER SOLUTION WITH NGINX AND SSL/TLS

Project Description

This project was a continuation of the previous project with the implementation of a load balancer and a registered domain name registered with SSL certificate, as shown in the project diagram;

Project Steps :

1. spin up a virtual machine in AWS running Ubuntu version 20.04 LTS
2. update /etc/hosts with webservers IP4 address from previous project
3. installing nginx

• sudo yum install nginx -y

4. confirming nginx is running

5. Editing the hosts file

6. Updating nginx config file

• sudo vi /etc/nginx/nginx.conf

7. Registering domain with godaddy.com and updating the name server with A-record of Route53

8. Assigning an Elastic IP address with nginx load balancer and associating it to the created domain name so it remains upon reboot

9. updating nginx configuration file with domain

10. Ensuring snapd service is running and Installing Certbot

• sudo systemctl status snapd
• sudo snap install --classic certbot

11. requesting a certificate

• sudo ln -s /snap/bin/certbot /usr/bin/certbot
• sudo certbot --nginx

12. Site registered with SSL certificate port 443 opened in security group of load balancer

13. Renewing Certificate using dry-run

• sudo certbot renew --dry-run

14. Scheduling a cron job to automatically renew the licence of the certificate

• crontab -e

• updating the file with the command to renew certificates twice a day

• • */12 * * * root /usr/bin/certbot renew > /dev/null 2>&1