Self-Hosting
SSL/TLS on Apache, nginx, and OpenLiteSpeed: Install, Harden, Troubleshoot
Getting a certificate installed is table stakes; configuring TLS correctly is where servers actually differ. Plenty of production sites serve valid HTTPS and would still earn a C or D from SSL Labs, weak ciphers enabled, TLS 1.0 still accepted, HSTS missing, a certificate expiring next week because nobody