What you will do

Here are the steps you will go through:

• Spawn a cloud instance which will host our demo website.
• Do some basic hardening of our server and set up Nginx.
• Install a brand new Let’s encrypt certificate and set up its automatic renewal
• Harden the Nginx configuration
• Harden the Security Headers
• Get that shiny A+ security rating you are looking for

This tutorial will use Exoscale as cloud provider since they offer integrated firewall and DNS management. On top of that Exoscale has a strong focus on data safety / privacy and security. Of course you can follow along using any other cloud or traditional hosting service.

https://letsecure.me/secure-web-deployment-with-lets-encrypt-and-nginx/