Configure NGINX with HTTPS, redirect 80 to 443, CertBot, CentOS 7

Install NGINX repo:

cat <<'EOF'> /etc/yum.repos.d/nginx.repo
[nginx]
name=nginx repo
baseurl=https://nginx.org/packages/centos/7/$basearch/
gpgcheck=0
enabled=1
EOF

Reload yum cache:

yum clean all && rm -rf /var/cache/yum && yum makecache fast

Install Nginx:

yum -y install nginx

Install EPEL repo for certbox:

yum -y install epel-release

Install yum utils:

yum -y install yum-utils

Configure extras and optional packages:

yum-config-manager --enable rhui-REGION-rhel-server-extras rhui-REGION-rhel-server-optional

Install certbot agent:

yum -y install certbot python2-certbot-nginx

Generate certificate:

certbot --nginx certonly

Go to NGinx site dir:

cd /etc/nginx/conf.d

Remove default config:

rm -rf default.conf

Create 443 directive:

cat <<'EOF' > main.conf
server {
listen 443;
server_name beebox.sytes.net;
ssl on;
ssl_certificate /etc/letsencrypt/live/beebox.sytes.net/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/beebox.sytes.net/privkey.pem;
location / {
root /usr/share/nginx/html;
index index.html index.htm;
}
error_page 500 502 503 504 /50x.html;
location = /50x.html {
root /usr/share/nginx/html;
}
}
EOF

Create redirect from 80 to 443:

cat <<'EOF' > redirect.conf
server {
listen 0.0.0.0:80;
server_name beebox.sytes.net;
rewrite ^ https://$server_name$request_uri? permanent;
}
EOF

Restart nginx:

systemctl restart nginx