• Let's Encrypt
• Certbot
• Realm of Espionage

• openSUSE Tumbleweed (Server)
• nginx

sudo zypper install 'python314-certbot'

• Set email

sudo mkdir -p '/etc/letsencrypt' && sudo -e '/etc/letsencrypt/cli-custom.ini'

verbose = 'true'
max-log-backups = '0'
text = 'true'
non-interactive = 'true'
standalone = 'true'
force-renewal = 'true'
agree-tos = 'true'

########################################
email = 'espionage724@x'
########################################

no-eff-email = 'true'

rsa-key-size = '4096'
redirect = 'true'
hsts = 'true'
uir = 'true'
staple-ocsp = 'false'
key-type = 'ecdsa'
elliptic-curve = 'secp384r1'

domains = 'realmofespionage.xyz, wiki.realmofespionage.xyz, media.realmofespionage.xyz, blog.realmofespionage.xyz, social.realmofespionage.xyz, forums.realmofespionage.xyz, status.realmofespionage.xyz, files.realmofespionage.xyz, test.realmofespionage.xyz, chat.realmofespionage.xyz'

# End

• If it passes the dry run, remove the dry-run argument and re-run

sudo 'certbot' 'certonly' --config '/etc/letsencrypt/cli-custom.ini' --dry-run

sudo systemctl stop 'nginx'

mkdir -p ~/'.local/scripts/www/certbot' && nano ~/'.local/scripts/www/certbot/certbot-renewal.sh' && chmod +x ~/'.local/scripts/www/certbot/certbot-renewal.sh'

#!/bin/sh

cd '/tmp'

'/usr/bin/systemctl' stop 'nginx'

'/usr/bin/certbot' 'certonly' --config '/etc/letsencrypt/cli-custom.ini' --quiet

'/usr/bin/systemctl' start 'nginx'

# End

~/'.local/scripts/www/certbot/certbot-renewal.sh'

• Weekly (Sunday) 07:00:00 AM

sudo mkdir -p '/etc/cron.d' && sudo -e '/etc/cron.d/certbot-renewal'

#
SHELL=/bin/sh

0 7 * * sun root '/home/espionage724/.local/scripts/www/certbot/certbot-renewal.sh'

# End