SSL Certificate Setup
Place your SSL certificates in this directory:
ssl/cert.pem — your certificate (or fullchain)
ssl/key.pem — your private key
To generate self-signed certs for local testing:
openssl req -x509 -nodes -days 365 -newkey rsa:2048 \
-keyout ssl/key.pem -out ssl/cert.pem \
-subj "/CN=localhost"
For production, use Let's Encrypt:
certbot certonly --standalone -d your-domain.com
cp /etc/letsencrypt/live/your-domain.com/fullchain.pem ssl/cert.pem
cp /etc/letsencrypt/live/your-domain.com/privkey.pem ssl/key.pem
