---
estimated_steps: 4
estimated_files: 3
skills_used: []
---

# T01: Configure AdGuard DNS + nginx reverse proxy + Certbot SSL

1. Add chrysopedia.com and www.chrysopedia.com DNS rewrites to AdGuard on ub01 (pointing to 10.0.0.9)
2. Create nginx server block for chrysopedia.com on nuc01 (proxy_pass to 10.0.0.10:8096)
3. Run certbot for SSL cert (requires external A record)
4. Verify https://chrysopedia.com loads

## Inputs

- None specified.

## Expected Output

- `AdGuard DNS rewrite entries`
- `nginx config on nuc01`
- `SSL cert from Certbot`

## Verification

ssh ub01 'curl -sI http://chrysopedia.com' | head -5
