A production-grade automation tool for configuring Nginx reverse proxies with automated SSL, performance tuning, and security hardening.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install ssl-setup
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install ssl-setup using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is SSL + Nginx Setup?
This technical module within Openclaw Skills provides a robust framework for deploying secure web applications on any VPS running Ubuntu or Debian. It handles the entire lifecycle of web server setup, from initial Nginx installation to the automated provisioning of SSL/TLS certificates via Let's Encrypt. By leveraging this skill, developers can ensure their applications are protected by modern security standards like TLS 1.3 and HSTS while maintaining high performance through Gzip compression and HTTP/2 optimization.
The primary value of using Openclaw Skills for server management is the elimination of manual configuration errors. It provides a structured approach to reverse proxying, ensuring that essential headers like X-Forwarded-For and WebSocket support are correctly implemented from the start. This allows developers to focus on building their apps while the infrastructure layer remains secure, compliant, and easy to maintain.
SSL + Nginx Setup Use Cases
- Deploying production-ready HTTPS for any application running on a local port (e.g., Node.js, Python, Go).
- Migrating legacy HTTP sites to secure HTTPS with automated 301 redirects.
- Setting up wildcard SSL certificates for complex subdomain architectures.
- Hardening existing Nginx installations with security headers and optimized TLS ciphers.
- Automating the renewal of Let's Encrypt certificates to prevent site downtime.
How SSL + Nginx Setup Works
- Performs a pre-flight DNS check to ensure the target domain correctly resolves to the server IP.
- Installs the latest Nginx and Certbot packages along with required Python dependencies.
- Generates a standard Nginx site configuration designed for high-performance reverse proxying.
- Initiates a Let's Encrypt challenge via the Certbot Nginx plugin to obtain a valid SSL certificate.
- Overwrites the initial configuration with a hardened production version featuring HSTS, CSP, and TLS 1.3 settings.
- Configures automated renewal hooks to reload the web server whenever certificates are updated by the system.
SSL + Nginx Setup Setup
To get started with this skill, ensure you have SSH access to your VPS and a domain pointed to your IP. Use the following commands to prepare your environment:
# Update system packages
apt update
# Install Nginx and Certbot dependencies
apt install -y nginx certbot python3-certbot-nginx
# Verify your domain resolves before triggering the skill
dig +short yourdomain.com A
SSL + Nginx Setup Data Schema & Taxonomy
The skill manages configuration and security assets across several key directories within the standard Linux file system. This organization ensures that Openclaw Skills maintain compatibility with standard system administration tools.
| Component | Path | Description |
|---|---|---|
| Site Config | /etc/nginx/sites-available/ | Source configuration file for the specific domain. |
| Symlink | /etc/nginx/sites-enabled/ | Enables the site within the active Nginx process. |
| Certificates | /etc/letsencrypt/live/ | Storage for the fullchain.pem and privkey.pem files. |
| Renewal Hooks | /etc/letsencrypt/renewal-hooks/deploy/ | Scripts that trigger a reload after certificate updates. |
| Backups | /etc/nginx/sites-available/*.bak | Timestamped backups of previous configurations. |
SSL + Nginx Setup Advanced Features
- Multi-domain support allowing one server to host several secure applications concurrently.
- Integrated WebSocket support with pre-configured Upgrade and Connection headers.
- Custom Content Security Policy (CSP) templates for different frameworks like React, Next.js, and WordPress.
- Automated DNS-01 challenges for obtaining wildcard certificates via Cloudflare, DigitalOcean, or Route53 APIs.
- Performance-optimized Gzip settings for various MIME types including JSON, JavaScript, and SVG.
SKILL.md
Loading
Related Openclaw Skills
Production Docker Compose Generator
A specialized skill for generating production-ready Docker Compose configurations with built-in security, monitoring, and resource management.
CI-Gen
CI-Gen is an intelligent workflow generator that analyzes your project's stack to create optimized, production-ready GitHub Actions CI/CD pipelines.
VPS Deploy
Deploy a full-stack application to any VPS from zero to production in one command with automated security hardening and SSL.
Free AI Video Generator With No Restrictions
A professional AI video generation tool for Openclaw Skills that converts text prompts and clips into watermark-free 1080p MP4 files using cloud GPU clusters.
Problem Set Workshop
A specialized AI engine for generating high-quality competitive programming problems focused on algorithmic depth and professional OI standards.
Knowledge Base Retrieval: AI Art & Technology Research
A specialized RAG tool for retrieving deep technical and artistic profiles from a curated 20-artist knowledge base.
Featured*
