Install SSL Certificate


These instructions related to manually obtained SSL certificates. To use lets encrypt certificates see Obtain and configure ssl certificate on nginx with letsencrypt

To create a certificate, see Create SSL Certificate


The following task expects the certificate to be in a folder for the domain within a folder called ssl-cert which is placed beside the pillar folder. See Site - Configuration for details…

Make sure the Salt pillar is configured correctly for the site. You need to set ssl to True and the domain must match the certificate e.g:

ssl: True


If you are using Mailgun, then don’t forget to update the route to use https rather than http.


To copy an SSL certificate to a cloud server run this from the fabric folder:

fab ssl


These tasks will ask you to enter the sudo password for the user on the server.


This task expects the /srv/ folder to exist on the server. I don’t know what creates the folder… so I am currently not sure how it gets there!

To update an existing certificate:

ssh hatherleigh_info
sudo -i
service nginx restart

To add a new first certificate run:

salt 'drop-temp' state.highstate``

for your server so the site is set-up correctly for SSL.