26 lines
473 B
Plaintext
26 lines
473 B
Plaintext
|
= LetsEncrypt =
|
||
|
|
|
||
|
|
== Certbot Usage ==
|
||
|
|
|
||
|
|
Create a cert using the interactive menu:
|
||
|
|
|
||
|
|
{{{
|
||
|
|
# certbot certonly
|
||
|
|
}}}
|
||
|
|
|
||
|
|
== Automating Renewal ==
|
||
|
|
|
||
|
|
LetsEncrypt Certs are good for a max of 90 days, so automating renewal is a must.
|
||
|
|
|
||
|
|
Do a dry-run renewal with certbot:
|
||
|
|
|
||
|
|
{{{
|
||
|
|
# certbot renew --dry-run
|
||
|
|
}}}
|
||
|
|
|
||
|
|
This will test, and possibly renew all certs that certbot knows about
|
||
|
|
|
||
|
|
%%Now you can use `certbot renew --quiet` for scripting this renewal. I do mine with a simple systemd script:
|
||
|
|
|
||
|
|
|