Certbot

sudo ufw allow from 0.0.0.0/0 to any port 80
sudo snap install --classic certbot
sudo ln -s /snap/bin/certbot /usr/bin/certbot
sudo service nginx stop
sudo certbot certonly --standalone
sudo service nginx start

UFW(Uncomplicated Firewall) & SSH Port

sudo vim /etc/ssh/sshd_config
# ssh port 변경
sudo service sshd restart
sudo ufw default deny
sudo ufw enable
sudo ufw allow from 0.0.0.0/0 to any port (SSH Port)
sudo ufw allow from (개발자IP) to any port (DB Port)
sudo ufw allow from 0.0.0.0/0 to any port 443

NGINX

server {
        listen 443 ssl default_server;
        listen [::]:443 ssl default_server;

        ssl_certificate /etc/letsencrypt/live/j7d109.p.ssafy.io/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/j7d109.p.ssafy.io/privkey.pem;

}