SSL directive configuration in Nginx - Mini Project: Build & Apply

SSL Directive Configuration in Nginx

📖 Scenario: You are setting up a secure website using Nginx web server. To protect your users' data, you need to configure SSL (Secure Sockets Layer) directives properly in your Nginx configuration file.This project will guide you step-by-step to create a basic SSL configuration for your website.

🎯 Goal: Build a simple Nginx server block configuration that enables SSL using the correct directives and paths to certificate files.

📋 What You'll Learn

Create a server block listening on port 443

Add SSL certificate and key file paths

Enable SSL protocol and specify TLS version

Print the final server block configuration

💡 Why This Matters

🌍 Real World

Web servers use SSL to encrypt data between the server and users, protecting sensitive information like passwords and credit card numbers.

💼 Career

Knowing how to configure SSL in Nginx is essential for DevOps engineers and system administrators to secure web applications.

1

Create the basic server block

Create a variable called nginx_config and assign it a string containing the basic Nginx server block listening on port 443 with server_name set to example.com.

Nginx

# Create the nginx_config variable with the basic server block listening on port 443
# Your code here

Need a hint?

Use triple quotes or escape newlines to create a multi-line string for the server block.

2

Add SSL certificate and key file paths

Add the SSL certificate and key file directives inside the nginx_config string. Use ssl_certificate /etc/ssl/certs/example.crt; and ssl_certificate_key /etc/ssl/private/example.key; exactly.

Nginx

nginx_config = "server {\n    listen 443 ssl;\n    server_name example.com;\n    # Add ssl_certificate and ssl_certificate_key directives below\n}"

Need a hint?

Place the SSL directives inside the server block, each on its own line.

3

Enable SSL protocols and specify TLS version

Add the directives ssl_protocols TLSv1.2 TLSv1.3; and ssl_prefer_server_ciphers on; inside the nginx_config string to specify TLS versions and cipher preference.

Nginx

nginx_config = "server {\n    listen 443 ssl;\n    server_name example.com;\n    ssl_certificate /etc/ssl/certs/example.crt;\n    ssl_certificate_key /etc/ssl/private/example.key;\n    # Add ssl_protocols and ssl_prefer_server_ciphers directives below\n}"

Need a hint?

These directives help ensure your server uses modern and secure SSL protocols.

4

Print the final Nginx SSL configuration

Write a print statement to display the full nginx_config string.

Nginx

nginx_config = "server {\n    listen 443 ssl;\n    server_name example.com;\n    ssl_certificate /etc/ssl/certs/example.crt;\n    ssl_certificate_key /etc/ssl/private/example.key;\n    ssl_protocols TLSv1.2 TLSv1.3;\n    ssl_prefer_server_ciphers on;\n}"
# Print the nginx_config variable below
# Your code here

Need a hint?

Use print(nginx_config) to show the full configuration.