I you need to use https for your webserver, you can use the nifty Certbot. It's dead simple to install and give free HTTPS certificates forever

To automatically renew the certificate, create those files in /etc/ systemd/sytem/ :
certbot.service
Code: Select all
[Unit]
Description=Lets Encrypt renewal
[Service]
Type=oneshot
ExecStart=/usr/bin/certbot renew --quiet --agree-tos
Code: Select all
[Unit]
Description=Twice daily renewal of Lets Encrypts certificates
[Timer]
OnCalendar=0/12:00:00
RandomizedDelaySec=1h
Persistent=true
[Install]
WantedBy=timers.target
enjoy