---
title: "Discussion on \"🔐 Fortify Your Droplet: Unlock Free HTTPS with Let’s Encrypt SSL!\" | Hashnode"
description: "Discussion on \"🔐 Fortify Your Droplet: Unlock Free HTTPS with Let’s Encrypt SSL!\". Step-by-step guide to add HTTPS on your DigitalOcean Droplet using Let’s Encrypt, Certbot, and Nginx on Ubuntu 24.04."
url: "https://hashnode.com/posts/fortify-your-droplet-unlock-free-https-with-lets-encrypt-ssl/68c90447bc005ea52fdaedf7"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [🔐 Fortify Your Droplet: Unlock Free HTTPS with Let’s Encrypt SSL!](https://insafnilam.hashnode.dev/fortify-your-droplet-unlock-free-https-with-lets-encrypt-ssl?utm_source=hashnode&utm_medium=feed)

Step-by-step guide to add HTTPS on your DigitalOcean Droplet using Let’s Encrypt, Certbot, and Nginx on Ubuntu 24.04.

Sep 16, 2025 · 3 min read · insafnilam.hashnode.dev  
Updated Sep 21, 2025  
Read the article

-   [#digitalocean](https://hashnode.com/tag/digitalocean)
-   [#ubuntu](https://hashnode.com/tag/ubuntu)
-   [#serversecurity](https://hashnode.com/tag/serversecurity)
-   [#vps-server](https://hashnode.com/tag/vps-server)
-   [#nginx](https://hashnode.com/tag/nginx)
-   [#letsencrypt](https://hashnode.com/tag/letsencrypt)
-   [#ssltls](https://hashnode.com/tag/ssltls)
-   [#certbot](https://hashnode.com/tag/certbot)
-   [#https](https://hashnode.com/tag/https)
-   [#linux-administration](https://hashnode.com/tag/linux-administration)

## Written by

[Mohammed Insaf Nilam](https://hashnode.com/@insafnilam)

@insafnilam · Colombo, Srilanka

  
[View profile](https://hashnode.com/@insafnilam)

🚀 Turning coffee into scalable code

I’m Insaf Nilam, a full-stack developer passionate about crafting clean, efficient, and future-ready software. I love solving complex problems, exploring new tech stacks, and sharing my learnings through blogs. When I’m not coding, I’m probably tweaking deployments, experimenting with microservices, or geeking out over cloud architecture.

## Responses 1

Markdown supported · ⌘↵ to post

[CDN Edge Ops](https://hashnode.com/@cdnedgeops)

[Oct 30](https://hashnode.com/posts/fortify-your-droplet-unlock-free-https-with-lets-encrypt-ssl/68c90447bc005ea52fdaedf7/comment/6ae51f1eac3dd9a37fc2fb2a)

On a single droplet I terminate TLS at nginx and leave the app on localhost only. After Certbot writes the cert paths, nginx -t then reload; if renew fails, check that /.well-known/acme-challenge is not proxied to the app.