From ed772b9a914d1dc7e456d0de16c1cbc8824714d7 Mon Sep 17 00:00:00 2001
From: skwzrd <39067332+skwzrd@users.noreply.github.com>
Date: Thu, 25 May 2023 23:37:02 -0400
Subject: [PATCH] Update Reverse-Proxy.md

Nginx Reverse-Proxy with Certbot (hand holding guide)
---
 Reverse-Proxy.md | 26 ++++++++++++++++++++++++++
 1 file changed, 26 insertions(+)

diff --git a/Reverse-Proxy.md b/Reverse-Proxy.md
index 7f6aa59..c2f6758 100644
--- a/Reverse-Proxy.md
+++ b/Reverse-Proxy.md
@@ -31,6 +31,7 @@ server {
   server_name sub.domain.com;
   ssl_certificate     /path/to/ssl/cert/crt;
   ssl_certificate_key /path/to/ssl/key/key;
+  # *See "With SSL (Certbot)" below for details on automating ssl certificates
 
   location / {
     proxy_set_header   X-Real-IP $remote_addr;
@@ -61,6 +62,31 @@ server  {
 }
 ```
 
+With SSL (Certbot):
+```nginx
+server {
+  # If you don't have one yet, you can set up a subdomain with your domain registrar (e.g. Namecheap)
+  # Just create a new host record with type='A Record', host='<subdomain>', value='<ip_address>'.
+  
+  server_name your_subdomain.your_domain.your_tld;
+
+  location / {
+    proxy_set_header   X-Real-IP $remote_addr;
+    proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header   Host $host;
+    proxy_pass         http://localhost:3001/;
+    proxy_http_version 1.1;
+    proxy_set_header   Upgrade $http_upgrade;
+    proxy_set_header   Connection "upgrade";
+  }
+}
+
+# Once that's completed, you can run
+# sudo apt install python3-certbot-nginx
+# sudo certbot --nginx -d your_domain -d your_subdomain.your_domain -d www.your_domain
+# And Certbot will auto-populate this nginx .conf file for you, while also renewing your certificates automatically in the future.
+```
+
 # Apache
 With SSL:
 ```apache