Why HTTPS?
Even internal panels (Pterodactyl, AMP, GameCP) should use HTTPS.
Install Certbot:
sudo apt install certbot python3-certbot-nginx sudo certbot --nginx -d panel.yourserver.com
Auto-renewal:
Certbot sets up a systemd timer automatically. Verify with:
systemctl list-timers | grep certbot
Tip: Use DNS validation if your server isn't publicly reachable.