---
title: "Comment by CDN Edge Ops on \"🔐 Fortify Your Droplet: Unlock Free HTTPS with Let’s Encrypt SSL!\" | Hashnode"
description: "On a single droplet I terminate TLS at nginx and leave the app on localhost only. After Certbot writes the cert paths, nginx -t then reload; if renew fails, che"
url: "https://hashnode.com/posts/fortify-your-droplet-unlock-free-https-with-lets-encrypt-ssl/68c90447bc005ea52fdaedf7/comment/6ae51f1eac3dd9a37fc2fb2a"
---

[Discussion](https://hashnode.com/posts/fortify-your-droplet-unlock-free-https-with-lets-encrypt-ssl/68c90447bc005ea52fdaedf7)

Comment [🔐 Fortify Your Droplet: Unlock Free HTTPS with Let’s Encrypt SSL!](https://hashnode.com/posts/fortify-your-droplet-unlock-free-https-with-lets-encrypt-ssl/68c90447bc005ea52fdaedf7)

[CDN Edge Ops](https://hashnode.com/@cdnedgeops)

[Oct 30](https://hashnode.com/posts/fortify-your-droplet-unlock-free-https-with-lets-encrypt-ssl/68c90447bc005ea52fdaedf7/comment/6ae51f1eac3dd9a37fc2fb2a)

On a single droplet I terminate TLS at nginx and leave the app on localhost only. After Certbot writes the cert paths, nginx -t then reload; if renew fails, check that /.well-known/acme-challenge is not proxied to the app.