https://ultimatehomeserver.com/docs/getting-started/ssl
install certbot + route53
- changed
/opt/certbot/
to/opt/certbotfoo/
sudo apt update
sudo apt install python3 python3-venv libaugeas0
sudo python3 -m venv /opt/certbotfoo/
sudo /opt/certbotfoo/bin/pip install --upgrade pip
sudo /opt/certbotfoo/bin/pip install certbot
sudo ln -s /opt/certbotfoo/bin/certbot /usr/bin/certbot
sudo rm /usr/bin/certbot
sudo ln -s /opt/certbotfoo/bin/certbot /usr/bin/certbot
ls ~/.secrets/certbot
# set credentials for aws route53
sudo vi /root/.aws/config
sudo /opt/certbotfoo/bin/certbot certonly \
--dns-route53 \
--dns-route53-propagation-seconds 60 \
-d hs.tjenwellens.eu \
-d "*.hs.tjenwellens.eu"
add cron
echo "0 0,12 * * * root /opt/certbotfoo/bin/python -c 'import random; import time; time.sleep(random.random() * 3600)' && sudo certbot renew -q" | sudo tee -a /etc/crontab > /dev/null
test
sudo /opt/certbot/bin/certbot renew --dry-run