# HTTPS

Sydekyks user and operator guide. Check feature availability and release-specific installation requirements.

This tutorial is for self-hosters who terminate TLS themselves (typically Community Edition). You can skip this page if your environment already handles TLS for you - a managed host, a cloud load balancer, or a Kubernetes ingress.

To enable SSL, you can use a reverse proxy. In this case, we will use Nginx as the reverse proxy.

## ​Install Nginx

```
sudo apt-get install nginx

```

## ​Create Certificate

To proceed with this documentation, it is assumed that you already have a certificate for your domain.

You have the option to use Cloudflare or generate a certificate using Let’s Encrypt or Certbot.

Add the certificate to the following paths: /etc/key.pem and /etc/cert.pem

## ​Setup Nginx

```
sudo nano /etc/nginx/sites-available/default

```

```
server {
    listen 80;
    listen [::]:80;

    server_name example.com www.example.com;

    return 301 https://$server_name$request_uri;
}

server {
    listen 443 ssl http2;
    listen [::]:443 ssl http2;

    server_name example.com www.example.com;

    ssl_certificate /etc/cert.pem;
    ssl_certificate_key /etc/key.pem;

    location / {
        proxy_pass http://localhost:8080;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'upgrade';
        proxy_set_header Host $host;
        proxy_cache_bypass $http_upgrade;        
    }
}

```

## ​Restart Nginx

```
sudo systemctl restart nginx

```

## ​Test

Visit your domain and you should see your application running with SSL.