AWSのEC2にLEMP環境（Linux、Nginx、MariaDB、PHP）を作成し、WordPressをインストールする

$ sudo yum install -y php-gd php-mbstring php-xml

$ cd /usr/share/nginx/html
$ sudo wget https://ja.wordpress.org/latest-ja.tar.gz
$ sudo tar zxvf latest-ja.tar.gz
$ sudo rm -f latest-ja.tar.gz

$ ll
合計 20
-rw-r--r-- 1 ec2-user nginx 3665  5月 25 19:50 404.html
-rw-r--r-- 1 ec2-user nginx 3708  5月 25 19:50 50x.html
drwxr-xr-x 2 ec2-user nginx   27  6月 29 09:01 icons
-rw-r--r-- 1 ec2-user nginx 3520  5月 25 19:50 index.html
-rw-r--r-- 1 ec2-user nginx  368  5月 25 19:50 nginx-logo.png
lrwxrwxrwx 1 ec2-user nginx   14  6月 29 09:01 poweredby.png -> nginx-logo.png
drwxr-xr-x 5 ec2-user nginx 4096  6月 30 07:06 wordpress
$ sudo chown -R nginx:nginx wordpress
$ ll
合計 20
-rw-r--r-- 1 ec2-user nginx 3665  5月 25 19:50 404.html
-rw-r--r-- 1 ec2-user nginx 3708  5月 25 19:50 50x.html
drwxr-xr-x 2 ec2-user nginx   27  6月 29 09:01 icons
-rw-r--r-- 1 ec2-user nginx 3520  5月 25 19:50 index.html
-rw-r--r-- 1 ec2-user nginx  368  5月 25 19:50 nginx-logo.png
lrwxrwxrwx 1 ec2-user nginx   14  6月 29 09:01 poweredby.png -> nginx-logo.png
drwxr-xr-x 5 nginx    nginx 4096  6月 30 07:06 wordpress

$ cd wordpress
$ cp -p wp-config-sample.php wp-config.php
$ vi wp-config.php

/** WordPress のためのデータベース名 */
define( 'DB_NAME', '[作成したデータベース名]' );

/** MySQL データベースのユーザー名 */
define( 'DB_USER', '[作成したユーザー名]' );

/** MySQL データベースのパスワード */
define( 'DB_PASSWORD', '[作成したデータベースのパスワード]' );

define('AUTH_KEY',         'hoge');
define('SECURE_AUTH_KEY',  'hoge');
define('LOGGED_IN_KEY',    'hoge');
define('NONCE_KEY',        'hoge');
define('AUTH_SALT',        'hoge');
define('SECURE_AUTH_SALT', 'hoge');
define('LOGGED_IN_SALT',   'hoge');
define('NONCE_SALT',       'hoge');

$ sudo vi /etc/nginx/nginx.conf

server {
    listen       80;
    listen       [::]:80;
    server_name  _;
    root         /usr/share/nginx/html/wordpress;

location / {
    try_files $uri $uri/ /index.php?$args;
}

$ sudo systemctl restart nginx.service

$ sudo amazon-linux-extras install epel

$ sudo yum install -y certbot python2-certbot-nginx

$ sudo certbot
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator nginx, Installer nginx
Enter email address (used for urgent renewal and security notices)
 (Enter 'c' to cancel): [メールアドレスを入力]

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Please read the Terms of Service at

404 Page not found -  Let's Encrypt
Let's Encrypt is a free, automated, and open certificate authority brought to you by the nonprofit Internet Security Res...
letsencrypt.org You must
agree in order to register with the ACME server. Do you agree?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
(Y)es/(N)o: Y

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Would you be willing, once your first certificate is successfully issued, to
share your email address with the Electronic Frontier Foundation, a founding
partner of the Let's Encrypt project and the non-profit organization that
develops Certbot? We'd like to send you email about our work encrypting the web,
EFF news, campaigns, and ways to support digital freedom.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
(Y)es/(N)o: N
Account registered.
No names were found in your configuration files. Please enter in your domain
name(s) (comma and/or space separated)  (Enter 'c' to cancel): [対象のドメインを入力]
Requesting a certificate for [対象のドメイン]
Performing the following challenges:
http-01 challenge for [対象のドメイン]
Using default addresses 80 and [::]:80 ipv6only=on for authentication.
Waiting for verification...
Cleaning up challenges
Could not automatically find a matching server block for [対象のドメイン名]. Set the `server_name` directive to use the Nginx installer.

IMPORTANT NOTES:
 - Unable to install the certificate
 - Congratulations! Your certificate and chain have been saved at:
   /etc/letsencrypt/live/[対象のドメイン名]/fullchain.pem
   Your key file has been saved at:
   /etc/letsencrypt/live/[対象のドメイン名]/privkey.pem
   Your certificate will expire on 2021-09-30. To obtain a new or
   tweaked version of this certificate in the future, simply run
   certbot again with the "certonly" option. To non-interactively
   renew *all* of your certificates, run "certbot renew"

server {
    listen       443 ssl http2;
    listen       [::]:443 ssl http2;
    server_name  _;
    root         /usr/share/nginx/html/wordpress;

    ssl_certificate "/etc/letsencrypt/live/[ドメイン名]/fullchain.pem";
    ssl_certificate_key "/etc/letsencrypt/live/[ドメイン名]/privkey.pem";
    ssl_session_cache shared:SSL:1m;
    ssl_session_timeout  10m;
    ssl_prefer_server_ciphers on;
    （以下略）
}

$ sudo crontab -e

00 01 1,16 * * sudo certbot renew

$ sudo systemctl restart crond