Notes on SSL Everywhere

Here’s how I’m adding SSL to my wordpress sites for free:

On Linux hosts, here:


$ sudo add-apt-repository ppa:certbot/certbot
$ sudo apt-get update
$ sudo apt-get install certbot 

And then:

certbot certonly --webroot -w /var/www/ -d -w /var/www/ -d 

or apache:
certbot --apache
And to renew:
certbot renew --dry-run

For nginx web server, see:

listen 443 ssl; 
ssl on; 
ssl_certificate /etc/letsencrypt/live/; 
ssl_certificate_key /etc/letsencrypt/live/;

On apache2, see

sudo apt-get install python-certbot-apache

Then in wordpress, add plugins:

To test two-factor for users: