I’m running a Spring Boot app on a single AWS EC2 instance (Debian). A subdomain api.example.com points to the instance’s Elastic IP. I want to serve the app over HTTPS without an AWS load balancer.
What is the correct way to:
Obtain and install an SSL/TLS certificate (e.g., using Let’s Encrypt).
Configure Spring Boot or the OS so the app can use that certificate.
Set up automatic renewal.
So far:
DNS and Elastic IP are set up and reachable.
Security group allows inbound ports 80 and 443.
App runs fine on HTTP.
What’s the recommended process to set up HTTPS in this environment?