= LetsEncrypt =

== Certbot Usage ==

Create a cert using the interactive menu:

{{{
# certbot certonly
}}}

== Automating Renewal ==

LetsEncrypt Certs are good for a max of 90 days, so automating renewal is a must. 

Do a dry-run renewal with certbot:

{{{
# certbot renew --dry-run
}}}

This will test, and possibly renew all certs that certbot knows about

%%Now you can use `certbot renew --quiet` for scripting this renewal. I do mine with a simple systemd script: