• Let's Encrypt
• Certbot
• Realm of Espionage

• openSUSE Tumbleweed (Server)
• nginx

sudo zypper install 'python313-certbot'

sudo mkdir -p '/etc/letsencrypt' && sudo -e '/etc/letsencrypt/cli-custom.ini'

verbose = true
text = true
non-interactive = true
standalone = true
force-renewal = true
agree-tos = true

##################################################
email = espionage724@x
##################################################

no-eff-email = true

rsa-key-size = 4096
redirect = true
hsts = true
uir = true
staple-ocsp = false

pre-hook = systemctl stop 'nginx'
post-hook = systemctl start 'nginx'

domains = realmofespionage.xyz, blog.realmofespionage.xyz, files.realmofespionage.xyz, media.realmofespionage.xyz, wiki.realmofespionage.xyz

# End

• If it passes the dry run, remove the dry-run argument and re-run

sudo 'certbot' 'certonly' --config '/etc/letsencrypt/cli-custom.ini' --dry-run

sudo systemctl stop 'nginx'

sudo -e '/etc/systemd/system/certbot-renew-custom.service'

[Service]
Type=oneshot

ExecStart='/usr/bin/certbot' 'certonly' --config '/etc/letsencrypt/cli-custom.ini' --quiet

ExecStartPost='/usr/bin/sync'

# End

• Weekly

sudo -e '/etc/systemd/system/certbot-renew-custom.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'certbot-renew-custom.timer' --now

[Unit]
Description=Let's Encrypt Certificate Renewal
After=network-online.target
Wants=network-online.target

[Timer]
OnCalendar=weekly
Persistent=true

[Install]
WantedBy=multi-user.target

# End

sudo systemctl start 'certbot-renew-custom' && sudo systemctl status 'certbot-renew-custom' -l