Hello,
Here is a tutorial to install Nginx, let’s encrypt SSL, PHP7.3, MySQL, PHPmyadmin Postfix on Ubuntu 19.10 x64 (Eoan Ermine).

I just finished an installation without any problem.

package version :

• nginx-extras 1.16.1
• php7.3 fpm 7.3.11
• mysql 8.0.18
• phpmyadmin 4.6.6-5
• postfix 3.4.5-1
• certbot
• certbot-dns-digitalocean

update & upgrade

$ sudo apt update
$ sudo apt upgrade

install nginx-extras 1.16.1

$ wget --no-check-certificate http://archive.ubuntu.com/ubuntu/pool/universe/n/nginx/nginx-extras_1.16.1-0ubuntu2_amd64.deb
$ sudo apt-get install ./nginx-extras_1.16.1-0ubuntu2_amd64.deb

install php7.3 fpm 7.3.11

$ wget --no-check-certificate  http://archive.ubuntu.com/ubuntu/pool/universe/p/php7.3/php7.3-fpm_7.3.11-0ubuntu0.19.10.1_amd64.deb
$ sudo apt-get install ./php7.3-fpm_7.3.11-0ubuntu0.19.10.1_amd64.deb

install mysql-server 8.0.18 & mysql-client 8.0.18

1. download the MySQL repositories

   $ wget –c https://dev.mysql.com/get/mysql-apt-config_0.8.14-1_all.deb
   

2. install the MySQL repositories

   $ sudo apt-get install ./mysql-apt-config_0.8.14-1_all.deb
   

3. Refresh the Repositories

   $ sudo apt-get update
   

4. Install MySQL

   $ sudo apt-get install mysql-server
   

5. Set up MySQL Security

   $ sudo mysql_secure_installation
   

6. Start, Stop, or Check Status of MySQL Service

   $ sudo service mysql status
   $ sudo service mysql stop
   $ sudo service mysql start
   

• https://phoenixnap.com/kb/how-to-install-mysql-on-ubuntu-18-04

install phpmyadmin 4.6.6-5

$ wget --no-check-certificate http://archive.ubuntu.com/ubuntu/pool/universe/p/phpmyadmin/phpmyadmin_4.6.6-5_all.deb
$ sudo apt-get install ./phpmyadmin_4.6.6-5_all.deb

enable Firewall for http, https, SMTP, IMAP, IMAPS, POP3, POP3S

$ sudo ufw allow 'OpenSSH'
$ sudo ufw allow 'Nginx Full'
$ sudo ufw allow 22
$ sudo ufw allow 80
$ sudo ufw allow 443
$ sudo ufw allow 143
$ sudo ufw allow 993
$ sudo ufw allow 110
$ sudo ufw allow 995
$ sudo ufw enable
$ sudo ufw status

install Postfix 3.4.5-1

$ wget --no-check-certificate http://archive.ubuntu.com/ubuntu/pool/main/p/postfix/postfix_3.4.5-1ubuntu1_amd64.deb
$ sudo apt-get install ./postfix_3.4.5-1ubuntu1_amd64.deb

install SSL certificate

Retrieve and automatically renew Let’s Encrypt SSL Wildcard Certificates
with the plugin certbot-dns-digitalocean and API DigitalOcean. The
dns_digitalocean plugin automates the process of completing a dns-01
challenge (DNS01) by creating, and subsequently removing, TXT records
using the DigitalOcean API.

1. create token here: https://cloud.digitalocean.com/settings/api/tokens

2. install certbot and the certbot-dns-digitalocean plugin

   $ sudo apt install certbot
   $ sudo apt install python3-certbot-dns-digitalocean
   $ sudo certbot certonly --dns-digitalocean --dns-digitalocean-credentials ~/.secrets/certbot/digitalocean.ini --dns-digitalocean-propagation-seconds 60 -d domain.tld -d *.domain.tld```
   

1. renewal of certificates. renew the certificate every Monday night, and restart nginx

   $ sudo crontab -e
   30 4 * * 1 certbot renew
   40 4 * * 1 /etc/init.d/nginx reload
   

2. check config & restart Nginx

   $ sudo nginx -t
   $ sudo /etc/init.d/nginx reload
   

• https://certbot-dns-digitalocean.readthedocs.io/en/stable/
• https://www.digitalocean.com/community/tutorials/how-to-retrieve-let-s-encrypt-ssl-wildcard-certificates-using-cloudflare-validation-on-centos-7

DONE