How to Install LAMP Server with Let's Encrypt SSL on Debian 10

Installing a LAMP (Linux, Apache, MySQL/MariaDB, PHP) server on Debian 10 is a straightforward process. However, securing it with a free Let's Encrypt SSL certificate requires some additional steps. In this tutorial, we will guide you through the installation and configuration of LAMP server with Let's Encrypt SSL on Debian 10.

Installing LAMP Server

To start, install the required packages using the following command:

```

sudo apt-get install Apache2 mariadb-server php php-cli php-common libapache2-mod-php wget -y

```

This will install Apache web server, MariaDB database server, and PHP scripting language.

Creating Virtual Host Server Block

Next, you need to create a virtual host server block for your domain. You can do this by creating a new file in the `/etc/apache2/sites-available/` directory using the following command:

```

sudo nano /etc/apache2/sites-available/yourdomain.com.conf

```

Replace `yourdomain.com` with your actual domain name.

In this file, you will need to specify the document root, server name, and other settings. For example:

```

ServerName yourdomain.com

DocumentRoot /var/www/yourdomain.com

Options Indexes FollowSymLinks MultiViews

AllowOverride All

Require all granted

ErrorLog ${APACHE_LOG_DIR}/error.log

CustomLog ${APACHE_LOG_DIR}/access.log combined

```

Save and close the file when you are finished.

Enabling Apache Virtual Host

To enable the virtual host, use the following command:

```

sudo a2ensite yourdomain.com.conf

```

This will create a symbolic link to the enabled site in the `/etc/apache2/sites-enabled/` directory.

Installing Certbot Tool

To secure your web server with Let's Encrypt, you need to install the Certbot tool. You can do this using the following command:

```

sudo apt-get install certbot

```

Obtaining and Installing TLS/SSL Certificate

Once Certbot is installed, you can obtain and install a TLS/SSL certificate for your domain using the following command:

```

sudo certbot --apache -d yourdomain.com

```

Replace `yourdomain.com` with your actual domain name.

Certbot will automatically configure Apache to use the new SSL certificate. You can verify this by checking the Apache error log file:

```

sudo nano /var/log/apache2/error.log

```

Renewing TLS/SSL Certificate

Let's Encrypt certificates are valid for 90 days, so you will need to renew them regularly. You can do this using the following command:

```

sudo certbot renew --apache

```

This will automatically obtain and install a new SSL certificate before it expires.

By following these steps, you have successfully installed and secured your LAMP server with a free Let's Encrypt SSL certificate on Debian 10.

Install lamp debian