https://ultimatehomeserver.com/docs/getting-started/ssl

install certbot + route53

  • changed /opt/certbot/ to /opt/certbotfoo/
sudo apt update
sudo apt install python3 python3-venv libaugeas0
sudo python3 -m venv /opt/certbotfoo/
sudo /opt/certbotfoo/bin/pip install --upgrade pip
sudo /opt/certbotfoo/bin/pip install certbot

sudo ln -s /opt/certbotfoo/bin/certbot /usr/bin/certbot
sudo rm /usr/bin/certbot
sudo ln -s /opt/certbotfoo/bin/certbot /usr/bin/certbot

ls ~/.secrets/certbot

# set credentials for aws route53
sudo vi /root/.aws/config

sudo /opt/certbotfoo/bin/certbot certonly \
  --dns-route53 \
  --dns-route53-propagation-seconds 60 \
  -d hs.tjenwellens.eu \
  -d "*.hs.tjenwellens.eu"

add cron

echo "0 0,12 * * * root /opt/certbotfoo/bin/python -c 'import random; import time; time.sleep(random.random() * 3600)' && sudo certbot renew -q" | sudo tee -a /etc/crontab > /dev/null

test

sudo /opt/certbot/bin/certbot renew --dry-run